Description
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Winwar Media | WP Flipclock | ≤ 1.7.4 | — |
Medium · 6.5
CVE-2023-23728
EUVD-2023-27814GHSA-g5j2-jwp2-9p2h
WordPress WP Flipclock Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)
Published Mar 23, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack