Skip to content
OpenAdvisories

Vendor

Kevin Langley Jr.

2 known vulnerabilities.

Products

Widget Settings Importer/Exporter 1 Post Type Converter 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2020-36769

    Widget Settings Importer/Exporter Plugin <= 1.5.3 - Unauthorized Widget Import to Stored Cross-Site Scripting

    The Widget Settings Importer/Exporter Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wp_ajax_import_widget_dataparameter AJAX action in versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping.…

    Kevin Langley Jr. Widget Settings Importer/Exporter