Skip to content
OpenAdvisories

Vendor

ravanh

3 known vulnerabilities.

Products

Skype Legacy Buttons 1 Orange Comfort+ accessibility toolbar for WordPress 1 XML Sitemap & Google News 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-1808

    Orange Confort+ accessibility toolbar for WordPress <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplus_button shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization…

    ravanh Orange Comfort+ accessibility toolbar for WordPress Web / CMS
  • Medium 6.4
    CVE-2023-5615

    Skype Legacy Buttons <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Skype Legacy Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'skype-status' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attribut…

    ravanh Skype Legacy Buttons Web / CMS