Skip to content
OpenAdvisories

Vendor

weaverlancegmailcom

2 known vulnerabilities.

Products

jQuery Hover Footnotes 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-10553

    jQuery Hover Footnotes <= 1.4 - Cross-Site Request Forgery to Plugin Settings Update

    The jQuery Hover Footnotes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the jqFootnotes_options_subpanel function. This makes it possible fo…

    weaverlancegmailcom jQuery Hover Footnotes Web / CMS
  • Medium 6.4
    CVE-2026-10738

    jQuery Hover Footnotes <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via Footnote Qualifier ('{{...}}' Syntax)

    The jQuery Hover Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Footnote Qualifier ('{{...}}' Syntax) in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible…

    weaverlancegmailcom jQuery Hover Footnotes Web / CMS