Skip to content
OpenAdvisories

Product · nitinmaurya12

WordPress Visitors

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2022-4541

    WordPress Visitors <= 1.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Header

    The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat…

    nitinmaurya12 WordPress Visitors Web / CMS