Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Rescue Themes Rescue Shortcodes plugin <= 2.5 versions.

**Solution**

 No fix

No patched version is available. No reply from the vendor.

Found this useful? Thank yuyudhn for reporting this vulnerability. Buy a coffee ☕

yuyudhn discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Rescue Shortcodes Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**WordPress plugin developer?**

Start a free security program for your WordPress plugins or request an audit.

Apply for MVDP

**Security researcher?**

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more

CVE-2023-41728: WordPress Rescue Shortcodes plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hennessey Digital Attorney theme <= 3 theme.

**Solution**

 No fix

No patched version is available. No reply from the vendor.

Found this useful? Thank Mika for reporting this vulnerability. Buy a coffee ☕

Mika discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Attorney Theme. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**Other vulnerabilities in this theme**

 2 present

 0 patched

View all

**WordPress plugin developer?**

Start a free security program for your WordPress plugins or request an audit.

Apply for MVDP

**Security researcher?**

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more

CVE-2023-41692: WordPress Attorney theme <= 3 - Reflected Cross Site Scripting (XSS) vulnerability - Patchstack

The Blog Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vivafbcomment' shortcode in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

1<?php2if ( ! defined( 'ABSPATH' ) ) exit;3add\_action('wp\_head', 'vi\_fbopengraph');4add\_action('wp\_footer', 'vi\_fbmlsetting');5add\_filter ('the\_content', 'vi\_commentscode');6add\_filter('language\_attributes', 'vi\_fbcomment\_schema');7add\_shortcode('vivafbcomment', 'vi\_commentshortcode');89global $fboptn;101112function vi\_fbmlsetting() {13        $fboptn \= get\_option('fbcomment');14        15if (!isset($fboptn\['fbml'\])) {$fboptn\['fbml'\] \= "";}16if ($fboptn\['fbml'\] \== 'on') {17        ?>18<div id="fb-root"></div>19<script>(function(d, s, id) {20  var js, fjs = d.getElementsByTagName(s)\[0\];21  if (d.getElementById(id)) return;22  js = d.createElement(s); js.id = id;23  js.src = "//connect.facebook.net/<?php echo $fboptn\['lang'\]; ?>/sdk.js#xfbml=1&appId=<?php echo $fboptn\['appID'\]; ?>&version=v2.0";24  fjs.parentNode.insertBefore(js, fjs);25}(document, 'script', 'facebook-jssdk'));</script>26<?php   }27} 282930function vi\_fbcomment\_schema($attr) {31        $fboptn \= get\_option('fbcomment');32if (!isset($fboptn\['fbns'\])) {$fboptn\['fbns'\] \= "";}33if (!isset($fboptn\['opengraph'\])) {$fboptn\['opengraph'\] \= "";}34        if ($fboptn\['opengraph'\] \== 'on') {$attr .= "\\n xmlns:og=\\"http://opengraphprotocol.org/schema/\\"";}35        if ($fboptn\['fbns'\] \== 'on') {$attr .= "\\n xmlns:fb=\\"http://www.facebook.com/2008/fbml\\"";}36        return $attr;37}3839 40// ----Code for Adding Open Graph meta41 function vi\_fbopengraph() {42        $fboptn \= get\_option('fbcomment'); ?>43<meta property="fb:app\_id" content="<?php echo $fboptn\['appID'\]; ?>"/>44<meta property="fb:admins" content="<?php echo $fboptn\['mods'\]; ?>"/>45<meta property="og:locale" content="<?php echo $fboptn\['lang'\]; ?>" />46<meta property="og:locale:alternate" content="<?php echo $fboptn\['lang'\]; ?>" />47<?php48}4950// ----Code for hideWpComments51$fboptn \= get\_option('fbcomment');5253if (!isset($fboptn\['postshideWpComments'\])) {$fboptn\['postshideWpComments'\] \= "off";}54if (!isset($fboptn\['pageshideWpComments'\])) {$fboptn\['pageshideWpComments'\] \= "off";}5556if ($fboptn\['postshideWpComments'\] \== 'on' ) {57   function vi\_posts\_enqueueHideWpCommentsCss() 58     {59        wp\_register\_style('posts-front-css', plugins\_url('css/fb-comments-hidewpcomments-posts.css',\_\_FILE\_\_));60        wp\_enqueue\_style('posts-front-css');61     }                          62    add\_action('init', 'vi\_posts\_enqueueHideWpCommentsCss');63   }646566if ( $fboptn\['pageshideWpComments'\] \== 'on' ) {6768function vi\_pages\_enqueueHideWpCommentsCss() 69{70   wp\_register\_style('pages-front-css', plugins\_url('css/fb-comments-hidewpcomments-pages.css',\_\_FILE\_\_));71   wp\_enqueue\_style('pages-front-css');72}                               73add\_action('init', 'vi\_pages\_enqueueHideWpCommentsCss');74}757677if (!isset($fboptn\['hideWpComments'\])) {$fboptn\['hideWpComments'\] \= "";}7879        if ($fboptn\['hideWpComments'\] \== "on" ) {80                function vi\_fbComments\_enqueueHideWpCommentsCss() {81                        82         wp\_register\_style('front-css', plugins\_url('css/fb-comments-hidewpcomments.css',\_\_FILE\_\_));83         wp\_enqueue\_style('front-css');84                }85                add\_action('init', 'vi\_fbComments\_enqueueHideWpCommentsCss');86}878889function vi\_commentscode($content) {90$fboptn \= get\_option('fbcomment');91$pages \= $fboptn\['pagesid'\];92$totalpages \= explode(",",$pages);93 $allpage\=get\_all\_page\_ids();9495 $allpage\=array\_diff($allpage,$totalpages);9697if (!isset($fboptn\['html5'\])) {$fboptn\['html5'\] \= "off";}98if (!isset($fboptn\['pluginsite'\])) {$fboptn\['pluginsite'\] \= "off";}99if (!isset($fboptn\['posts'\])) {$fboptn\['posts'\] \= "off";}100if (!isset($fboptn\['pages'\])) {$fboptn\['pages'\] \= "off";}101if (!isset($fboptn\['homepage'\])) {$fboptn\['homepage'\] \= "off";}102if (!isset($fboptn\['count'\])) {$fboptn\['count'\] \= "off";}103if (!isset($fboptn\['countmsg'\])) {$fboptn\['countmsg'\] \= "0";}104        if ((is\_single() && $fboptn\['posts'\] \== 'on') ||105       (is\_page($allpage) && $fboptn\['pages'\] \== 'on') ||106       ((is\_home() || is\_front\_page()) && $fboptn\['homepage'\] \== 'on')) {107if($fboptn\['appID'\] != "") {108                if ($fboptn\['count'\] \== 'on') {109                        110                         $commentcount \= "<p class='commentcount'>";111                         $commentcount .= "<fb:comments-count href=\\"".get\_permalink()."\\"\></fb:comments-count>"." ".$fboptn\['countmsg'\]."</p>";112                         ?>113        114                <?php115                }116                if ($fboptn\['title'\] != '') {117                        118                                $commenttitle \= "<h3 class='coments-title'>";119                        $commenttitle .= $fboptn\['title'\]."</h3>";120                }121                $content .= "".$commenttitle.$commentcount;122123        if ($fboptn\['html5'\] \== 'on') {124                        $content .=     "<div class=\\"fb-comments\\" data-href=\\"".get\_permalink()."\\" data-numposts=\\"".$fboptn\['num'\]."\\" data-width=\\"".$fboptn\['width'\]."\\" data-colorscheme=\\"".$fboptn\['scheme'\]."\\"\></div>";125126    } else {127    128    $content .= "<fb:comments href=\\"".get\_permalink()."\\" num\_posts=\\"".$fboptn\['num'\]."\\" width=\\"".$fboptn\['width'\]."\\" colorscheme=\\"".$fboptn\['scheme'\]."\\"\></fb:comments>";129     }130131    if (!empty($fboptn\['pluginsite'\])) {132        if($fboptn\['pluginsite'\] \== 'on'){133      $content .= '<p class="pluginsite">'.\_\_( 'FB Comments Plugin Powered by', 'facebook-comment-by-vivacity' ). '<a href="https://www.startbitsolutions.com"  target="\_blank" >Startbit IT Solutions Pvt. Ltd.</a></p>';134        }}135    136    }137else {138        $fb\_adminUrl \= get\_admin\_url()."options-general.php?page=fbcomment";139   $content .= '<div class="error" style="color:#FF0000; font-weight:bold;">140            <p>'. \_\_( 'Please Enter Your Facebook App ID. Required for FB Comments.', 'facebook-comment-by-vivacity' ). ' <a href="'.$fb\_adminUrl.'">'. \_\_( 'Click here for FB Comments Settings page', 'facebook-comment-by-vivacity' )141            .'</a></p>142            </div>';143   }144  }145   return $content;146}147148149// -------Add facebook shortcode------150function vi\_commentshortcode($fbsrt) {151    extract(shortcode\_atts(array(152                "fbsrtcode" \=> get\_option('fbcomment'),153                "url" \=> get\_permalink(),154    ), $fbsrt));155    if (!empty($fbsrt)) {156        foreach ($fbsrt as $key \=> $option)157            $fbsrtcode\[$key\] \= $option;158        }159        if($fbsrtcode\['appID'\] != "") {160                if ($fbsrtcode\['count'\] \== 'on') {161                        162                        $commentcount \= "<p class='commentcount'>";163                        $commentcount .= "<fb:comments-count href=".$url."></fb:comments-count> ".$fbsrtcode\['countmsg'\]."</p>";164                }165                if ($fbsrtcode\['title'\] != '') {166                        $commenttitle \= "<h3>";167                        $commenttitle .= $fbcomment\['title'\]."</h3>";168                }169                $contentshortcode \= $commenttitle.$commentcount;170171        if ($fbsrtcode\['html5'\] \== 'on') {172                        $contentshortcode .=    "<div class=\\"fb-comments\\" data-href=\\"".$url."\\" data-num-posts=\\"".$fbsrtcode\['num'\]."\\" data-width=\\"".$fbsrtcode\['width'\]."\\" data-colorscheme=\\"".$fbsrtcode\['scheme'\]."\\"\></div>";173174    } else {175    $contentshortcode .= "<fb:comments href=\\"".$url."\\" num\_posts=\\"".$fbsrtcode\['num'\]."\\" width=\\"".$fbsrtcode\['width'\]."\\" colorscheme=\\"".$fbsrtcode\['scheme'\]."\\"\></fb:comments>";176     }177178        if (!empty($fbsrtcode\['pluginsite'\])) {179                if($fbsrtcode\['pluginsite'\] \== 'on'){180      $contentshortcode .= '<p class="pluginsite">'.\_\_( 'FB Comments Plugin Powered by', 'facebook-comment-by-vivacity' ). '<a href="https://www.startbitsolutions.com"  target="\_blank" >Startbit IT Solutions Pvt. Ltd.</a></p>';181        }}182        183        }184        else {185       $fb\_adminUrl \= get\_admin\_url()."options-general.php?page=fbcomment";186   $contentshortcode .= '<div class="error" style="color:red; font-weight:bold;">187            <p>'. \_\_( 'Please Enter Your Facebook App ID. Required for FB Comments.', 'facebook-comment-by-vivacity' ). ' <a href="'.$fb\_adminUrl.'">'. \_\_( 'Click here for FB Comments Settings page', 'facebook-comment-by-vivacity' )188            .'</a></p>189            </div>';190        }191  return $contentshortcode;192}193?>

CVE-2023-5295: user-file.php in facebook-comment-by-vivacity/tags/1.4 – WordPress Plugin Repository

The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server. This requires the [php] shortcode setting to be enabled on the vulnerable site.

1<?php2/\*\*3 \* Contains shortcode functions4 \*5 \* @since 4.06 \*/78\# Prevent direct access to this file9if ( 1 \== count( get\_included\_files() ) ) {10        header( 'HTTP/1.1 403 Forbidden' );11        return;12}1314class OpenHook\_ShortCodes {15        /\*\*16         \* PHP shortcode to process PHP in posts17         \*18         \* @global object $openhook Main OpenHook class object19         \*/20        public function php( $atts, $content \= null ) {21                global $openhook;2223                \# Prevent access to the shortcode via Ajax24                if ( defined( 'DOING\_AJAX' ) && DOING\_AJAX ) {25                        return;26                }2728                \# Only process this shortcode if the author of the post has the authority29                if ( author\_can( get\_the\_ID(), $openhook\->get\_auth\_level() ) ) {30                        \# Buffer the output of the PHP as we don't want to echo anything here31                        ob\_start();3233                        eval( "?>$content<?php " );34                35                        return ob\_get\_clean();36                } else {37                        return;38                }39        }4041        /\*\*42         \* Obfuscates a given email address to provide additional protection43         \* against email harvesters44         \*/45        public function email( $atts , $content \= null ) {46                return antispambot( $content );47        }4849        /\*\*50         \* Global custom fields, adapted from51         \* http://digwp.com/2009/09/global-custom-fields/52         \*/53        public function globals($atts) {54                \# Get the desired key55                extract( shortcode\_atts( array( 'key' \=> false ), $atts ) );5657                \# Determine the source of our global values58                $options \= get\_option( 'openhook\_shortcodes' );59                $source \= ( isset( $options\[ 'global\_source' \] ) && $options\[ 'global\_source' \] ) ? $options\[ 'global\_source' \] : false;6061                \# Only attempt to pull a global if both a key & source page are set62                if ( (string) $key && $source ) {63                        return get\_post\_meta( $source, $key, true );64                } else {65                        return;66                }67        }6869        /\*\*70         \* \[snap\] - Website snapshot shortcode71         \*72         \* @via https://www.rickbeckman.org/73         \* @inspiredby http://www.geekeries.fr/snippet/creer-automatiquement-miniatures-sites-wordpress/74         \*/75        public function snap( $atts, $content \= null ) {76                \# Default values77                $defaults \= \[78                        'url' \=> 'https://www.example.com/', \# URL to be snapshotted79                        'alt' \=> \_\_( 'Website Snapshot', 'thesis-openhook' ), \# Alt text for snapshot image80                        'w' \=> 400, \# Width of snapshot81                        'h' \=> 300, \# Height of snapshot82                        'class' \=> '', \# CSS class(es), space separated83                \];8485                \# Parse attributes86                $atts \= shortcode\_atts( $defaults, $atts, 'snap' ); \# @filter: shortcode\_atts\_snap8788                \# Sanity checks to ensure proper variables89                $url \= urlencode( wp\_http\_validate\_url( $atts\['url'\] ) ?: $defaults\['url'\] );90                $alt \= esc\_attr( $atts\['alt'\] );91                $w \= absint( $atts\['w'\] ) ?: $defaults\['w'\];92                $h \= absint( $atts\['h'\] ) ?: $defaults\['h'\];93                $class \= ! empty( $atts\['class'\] ) ? esc\_attr( $atts\['class'\] ) . ' website\_snapshot' : 'website\_snapshot';9495                \# Put together our IMG tag to be output, with final data sanitation96                $img \= '<img src="https://s.wordpress.com/mshots/v1/' . $url . '?w=' . $w . '&h=' . $h . '" alt="' . $alt . '" class="' . $class . '">';9798                return $img;99        }100}

CVE-2023-5201: shortcodes.php in thesis-openhook/tags/4.3.1/inc – WordPress Plugin Repository

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Giovambattista Fazioli WP Bannerize Pro plugin <= 1.6.9 versions.

**Solution**

 No fix

No patched version is available.

Found this useful? Thank thiennv for reporting this vulnerability. Buy a coffee ☕

thiennv discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress WP Bannerize Pro Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**WordPress plugin developer?**

Start a free security program for your WordPress plugins or request an audit.

Apply for MVDP

**Security researcher?**

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more

CVE-2023-41663: WordPress WP Bannerize Pro plugin <= 1.6.9 - Reflected Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.

**Solution**

 No fix

No patched version is available.

Le Ngoc Anh discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress WP-dTree Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**Other vulnerabilities in this plugin**

 3 present

 0 patched

View all

**WordPress plugin developer?**

Start a free security program for your WordPress plugins or request an audit.

Apply for MVDP

**Security researcher?**

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more

CVE-2023-41662: WordPress WP-dTree plugin <= 4.4.5  - Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin <= 1.0.13 versions.

**Solution**

 Fixed

Update the WordPress Photo Gallery Slideshow & Masonry Tiled Gallery plugin to the latest available version (at least 1.0.14).

Found this useful? Thank yuyudhn for reporting this vulnerability. Buy a coffee ☕

yuyudhn discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Photo Gallery Slideshow & Masonry Tiled Gallery Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.0.14.

**Other vulnerabilities in this plugin**

 0 present

 2 patched

View all

**WordPress plugin developer?**

Start a free security program for your WordPress plugins or request an audit.

Apply for MVDP

**Security researcher?**

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more

CVE-2023-41658: WordPress Photo Gallery Slideshow & Masonry Tiled Gallery plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Andreas Heigl authLdap plugin <= 2.5.9 versions.

**Solution**

 No fix

No patched version is available. No reply from the vendor.

Found this useful? Thank Rio Darmawan for reporting this vulnerability. Buy a coffee ☕

Rio Darmawan discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress authLdap Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**Other vulnerabilities in this plugin**

 2 present

 0 patched

View all

**WordPress plugin developer?**

Start a free security program for your WordPress plugins or request an audit.

Apply for MVDP

**Security researcher?**

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more

CVE-2023-41655: WordPress authLdap plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Irina Sokolovskaya Goods Catalog plugin <= 2.4.1 versions.

**Solution**

 No fix

No patched version is available. No reply from the vendor.

Found this useful? Thank Abdi Pranata for reporting this vulnerability. Buy a coffee ☕

Abdi Pranata discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Goods Catalog Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**WordPress plugin developer?**

Start a free security program for your WordPress plugins or request an audit.

Apply for MVDP

**Security researcher?**

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more

CVE-2023-41687: WordPress Goods Catalog plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. HollerBox plugin <= 2.3.2 versions.

**Solution**

 Fixed

Update the WordPress HollerBox plugin to the latest available version (at least 2.3.3).

Found this useful? Thank Rio Darmawan for reporting this vulnerability. Buy a coffee ☕

Rio Darmawan discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress HollerBox Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 2.3.3.

**Other vulnerabilities in this plugin**

 0 present

 2 patched

View all

**WordPress plugin developer?**

Start a free security program for your WordPress plugins or request an audit.

Apply for MVDP

**Security researcher?**

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more

Tag

#wordpress