Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mighty Digital Nooz plugin <= 1.6.0 versions.

**Solution**

Update the WordPress Nooz plugin to the latest available version (at least 1.7.0).

Rio Darmawan discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Nooz Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.7.0.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2023-25794: WordPress Nooz plugin <= 1.6.0 - Cross Site Scripting (XSS) - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions.

**Solution**

Deactivate and delete. This plugin has been closed as of January 18, 2023 and is not available for download. This closure is temporary, pending a full review.

Rio Darmawan discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Advanced Social Pixel Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2023-24381: WordPress Advanced Social Pixel plugin <= 2.1.1 - Cross Site Scripting (XSS) - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Aarvanshinfotech Online Exam Software: eExamhall plugin <= 4.0 versions.

**Solution**

Deactivate and delete. This plugin has been closed as of January 10, 2023 and is not available for download. This closure is temporary, pending a full review.

NeginNrb discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Online Exam Software : eExamhall Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2023-22681: WordPress Online Exam Software : eExamhall plugin <= 4.0 - Cross Site Request Forgery (CSRF) - Patchstack

Auth. (admin+) vulnerability in Second2none Service Area Postcode Checker plugin <= 2.0.8 versions.

**Solution**

Deactivate and delete. This plugin has been closed as of January 18, 2023 and is not available for download. This closure is temporary, pending a full review.

Rio Darmawan discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Service Area Postcode Checker Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2023-25782: WordPress Service Area Postcode Checker plugin <= 2.0.8 - Cross Site Scripting (XSS) - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Chasil Universal Star Rating plugin <= 2.1.0 version.

**Solution**

Deactivate and delete. This plugin has been closed as of December 9, 2022 and is not available for download. This closure is temporary, pending a full review.

Mika discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Universal Star Rating Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2022-46867: WordPress Universal Star Rating plugin <= 2.1.0 - Cross-Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin <= 1.0.13 versions.

**Solution**

Deactivate and delete. This plugin has been closed as of December 9, 2022 and is not available for download. This closure is temporary, pending a full review.

minhtuanact discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Launchpad – Coming Soon & Maintenance Mode Plugin Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has not been known to be fixed yet.

**1 other known vulnerability for this plugin**To plugin page

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2022-46854: WordPress Launchpad plugin <= 1.0.13 - Cross-Site Request Forgery (CSRF) vulnerability - Patchstack

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated attackers to invoke those functions, via forged request granted they can trick a site administrator into performing an action such as clicking on a link. Actions include resetting the API key, accessing or deleting log files, and deleting cache among others.

CVE-2023-1472: UnusedCSS_Admin.php in unusedcss/tags/1.7.1/includes/modules/unused-css – WordPress Plugin Repository

The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with minimal permissions, such as a subscrber, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

1<?php23defined('ABSPATH') or die("No direct script allowed!!!");4/\*5  Plugin Name: WP Popup Banners6  Plugin URI:  https://accesspressthemes.com/wordpress-plugins/wp-popup-banners/7  Description: Popup Banners plugin helps to add popups to your site with custom messages and effects8  Version:     1.2.59  Author:      AccessPress Themes10  Author URI:  http://accesspressthemes.com11  License:     GPL212  License URI: https://www.gnu.org/licenses/gpl-2.0.html13  Domain Path: /languages/14  Text Domain: wp-popup-banners15 \*/1617/\*\*18 \* Declaration of necessary constants for plugin19 \*/20defined('WPB\_IMAGE\_DIR') or define('WPB\_IMAGE\_DIR', plugin\_dir\_url(\_\_FILE\_\_) . 'images');21defined('WPB\_BACKEND\_DIR') or define('WPB\_BACKEND\_DIR', plugin\_dir\_url(\_\_FILE\_\_) . 'inc/backend');22defined('WPB\_JS\_DIR') or define('WPB\_JS\_DIR', plugin\_dir\_url(\_\_FILE\_\_) . 'js');23defined('WPB\_CSS\_DIR') or define('WPB\_CSS\_DIR', plugin\_dir\_url(\_\_FILE\_\_) . 'css\_files');24defined('WPB\_VERSION') or define('WPB\_VERSION', '1.2.5');25defined('WPB\_DEFAULT\_VARIABLE') or define('WPB\_DEFAULT\_VARIABLE', 'wpb\_default\_settings');26defined('WPB\_ABSPATH') or define('WPB\_ABSPATH', plugin\_dir\_path(\_\_FILE\_\_));2728if (!class\_exists('WPB\_Class')) {2930    /\*\*31     \* Declaration of plugin main class32     \*/33    class WPB\_Class {3435      var $wpb\_settings;3637        /\*\*38         \* Constructor39         \*/40        function \_\_construct() {4142          $this\->wpb\_settings \= get\_option('wpb\_default\_settings');43            register\_activation\_hook(\_\_FILE\_\_, array($this, 'activation\_function')); //load the function on plugin Activation44            add\_action('admin\_init', array($this, 'plugin\_init')); //session start and load the text domain on plugin initialization45            add\_action('admin\_menu', array($this, 'add\_wpb\_menu')); //add the plugin menu on menu bar46            add\_action('admin\_enqueue\_scripts', array($this, 'enqueue\_admin\_script')); //register admin scripts and css47            add\_action('admin\_post\_wpb\_save\_options', array($this, 'wpb\_save\_options')); //save the form data to the database48            add\_action('admin\_post\_wpb\_delete', array($this, 'delete\_wpb')); //delete popup data from database       49            add\_action('wp\_ajax\_get\_popup\_data', array($this, 'wpb\_get\_popup\_data')); //get the popup data from database on ajax call50            add\_action('wp\_ajax\_nopriv\_get\_popup\_data', array($this, 'no\_perminission')); //restrict the ajax call for other users except admin login5152            /\* Frontend Script \*/53            add\_action('wp\_enqueue\_scripts', array($this, 'wpb\_register\_frontend\_assets')); //register the front end scripts and css54            add\_action('wp\_footer', array($this, 'wpb\_appendto\_footer'), 100); //append the popup div on the footer of page55            add\_filter( 'admin\_footer\_text', array( $this, 'wppb\_admin\_footer\_text' ) );56            add\_filter( 'plugin\_row\_meta', array( $this, 'wppb\_plugin\_row\_meta' ), 10, 2 );57          }5859          function wppb\_admin\_footer\_text( $text ){60            global $post;61            if ( (isset( $\_GET\[ 'page' \] ) && $\_GET\[ 'page' \] \== 'wpb' ) ) {62              $link \= 'https://wordpress.org/support/plugin/wp-popup-banners/reviews/#new-post';63              $pro\_link \= 'https://accesspressthemes.com/wordpress-plugins/wp-popup-banners-pro';64              $text \= 'Enjoyed WP Popup Banners? <a href="' . $link . '" target="\_blank">Please leave us a ★★★★★ rating</a> We really appreciate your support! | Try premium version of <a href="' . $pro\_link . '" target="\_blank">WP Popup Banners Pro</a> - more features, more power!';65              return $text;66            } else {67              return $text;68            }69          }7071          function wppb\_plugin\_row\_meta( $links, $file ){7273            if ( strpos( $file, 'wp-popup-banners.php' ) !== false ) {74              $new\_links \= array(75                'demo' \=> '<a href="http://demo.accesspressthemes.com/wordpress-plugins/wp-popup-banner" target="\_blank">Live Demo</a>',76                'doc' \=> '<a href="https://accesspressthemes.com/documentation/wp-popup-banners/" target="\_blank">Documentation</a>',77                'support' \=> '<a href="http://accesspressthemes.com/support" target="\_blank">Support</a>',78                'pro' \=> '<a href="https://accesspressthemes.com/wordpress-plugins/wp-popup-banners-pro" target="\_blank">Premium version</a>'79              );8081              $links \= array\_merge( $links, $new\_links );82            }8384            return $links;85          }86        /\*87         \* Plugin Activation 88         \*/8990        function activation\_function() {91          include('inc/activation.php');92        }9394        /\*\*95         \* Starts session on admin\_init hook96         \*/97        function plugin\_init() {98          if (!session\_id() && !headers\_sent()) {99            session\_start();100          }101          load\_plugin\_textdomain('wp-popup-banners', false, dirname(plugin\_basename(\_\_FILE\_\_)) . '/languages');102        }103104        /\*\*105         \* Returns Default Settings106         \*/107        function get\_default\_settings() {108          $default\_settings \= array(109            'check\_enable' \=> '1',110            'default\_popup\_id' \=> ''111          );112113          return $default\_settings;114        }115116        /\*\*117         \* Plugin Admin Menu118         \*/119        function add\_wpb\_menu() {120          $menu \= add\_menu\_page(121            \_\_('WP Popup Banners', 'wp-popup-banners'), \_\_('WP Popup Banners', 'wp-popup-banners'), 'manage\_options', 'wpb', array($this, 'wpb\_settings'), WPB\_IMAGE\_DIR . '/wpb1.png'122          );123        }124125        /\*\*126         \* Plugin Main Settings Page127         \*/128        function wpb\_settings() {129          include('inc/backend/main-page.php');130        }131132        /\*\*133         \* Registers Admin Assets134         \*/135        function enqueue\_admin\_script($hook) {136          if (isset($\_GET\['page'\]) && $\_GET\['page'\] \== 'wpb') {137            wp\_enqueue\_style('wp-color-picker');138            wp\_enqueue\_style('wpb-fontawesome', WPB\_CSS\_DIR . '/font-awesome/font-awesome.min.css');139            wp\_enqueue\_style('wpb-admin-css', WPB\_CSS\_DIR . '/backend.css', array(), WPB\_VERSION);140            wp\_enqueue\_style('wpb-popup-css', WPB\_CSS\_DIR . '/wpb\_popup.css', array(), WPB\_VERSION);141            wp\_enqueue\_script('wpb-popup-js', WPB\_JS\_DIR . '/backend\_popup.js', array('jquery', 'wp-color-picker'), WPB\_VERSION, false);142            wp\_enqueue\_script('wpb-popup-colorpicker-alpha', WPB\_JS\_DIR . '/wp-color-picker-alpha.js', array('wp-color-picker'), WPB\_VERSION );143                /\*\*144                 \* localize the variable with javascript145                 \*/146                wp\_localize\_script(147                  'wpb-popup-js', 'wpb\_admin\_js', array(148                    'wpb\_ajaxurl' \=> admin\_url('admin-ajax.php'),149                    'wpb\_ajax\_nonce' \=> wp\_create\_nonce('wpb\_ajax\_nonce')150                  )151                );152              }153            }154155        /\*\*156         \* Save popup parameters to the database157         \* 158         \*/159        function wpb\_save\_options() {160          if (isset($\_POST\['wpb\_add\_nonce\_save\_settings'\], $\_POST\['wpb\_save\_settings'\]) && wp\_verify\_nonce($\_POST\['wpb\_add\_nonce\_save\_settings'\], 'wpb\_nonce\_save\_settings')) {161                /\*\*162                 \* include to add/update popup if condition matched163                 \*/164                include( 'inc/backend/save\_new\_popup.php' );165              } else {166                die('No script kiddies please!!');167              }168            }169170        /\*\*171         \* 172         \* Delete banner from database173         \*/174        function delete\_wpb() {175          if (!empty($\_GET) && wp\_verify\_nonce($\_GET\['\_wpnonce'\], 'wpb\_delete\_nonce')) {176            $log\_id \= $\_GET\['wpb\_id'\];177            global $wpdb;178            $table\_name \= $wpdb\->prefix . 'popup\_banners';179            $delete \= $wpdb\->delete($table\_name, array('id' \=> $log\_id), array('%d'));180181            if ($delete) {182              $\_SESSION\['wpb\_db\_success'\] \= \_\_('Banner deleted Successfully', 'wp-popup-banners');183            } else {184              $\_SESSION\['wpb\_db\_fail'\] \= \_\_('Failed to delete Banner.', 'wp-popup-banners');185            }186187            wp\_redirect(admin\_url('admin.php?page=wpb'));188          } else {189            die('No script kiddies please!!');190          }191        }192193        /\*\*194         \* Get popup parameters from database195         \*/196        function wpb\_get\_popup\_data() {197          return (include('inc/get\_db\_data.php'));198        }199200        /\*\*201         \* restrict the Ajax call to the unauthorized users202         \*/203        function no\_perminission() {204          die('No script kiddies please!!');205        }206207        /\*\*208         \* Registers frontend Assets209         \*/210        function wpb\_register\_frontend\_assets() {211            /\*\*212             \* check the conditions such as if the popup option is enabled or not213             \* and check the active popup. And also check where to display the popup such214             \* as only on home page or all page or only on specific pages and enque the scripts 215             \* and css on that pages. 216             \*/217            $condition \= $this\->check\_popup\_condition();218            if ($condition \== 1) {//if the condition is true219              $arr\_data \= $this\->wpb\_get\_popup\_data();220221              wp\_enqueue\_style('wpb-admin-css', WPB\_CSS\_DIR . '/wpb\_popup.css', array(), WPB\_VERSION);222                wp\_enqueue\_script('wpb-nicescroll-js-script', WPB\_JS\_DIR . '/jquery.nicescroll.js', array('jquery'), true, WPB\_VERSION); //registering nice scroll js 223                wp\_enqueue\_script('wpb-frontend-js-script', WPB\_JS\_DIR . '/frontend\_popup.js', array('jquery', 'wpb-nicescroll-js-script'), true, WPB\_VERSION); //registering frontend js 224                wp\_localize\_script(225                  'wpb-frontend-js-script', 'wpb\_frontend\_js', array(226                    'popup\_delay\_enable' \=> $arr\_data\['popup\_delay\_enable'\],227                    'popup\_delay' \=> $arr\_data\['popup\_delay'\],228                    'popup\_close\_countdown' \=> $arr\_data\['popup\_close\_countdown'\],229                    'show\_popup\_cookie' \=> $arr\_data\['show\_popup'\],230                    'show\_countdown\_message' \=> $arr\_data\['show\_countdown\_message'\],231                    'popup\_type' \=> $arr\_data\['popup\_type'\],232                    'autoclose\_enable' \=> $arr\_data\['autoclose\_enable'\],233                  )234                );235            }//end of if condition236          }237238        /\*\*239         \* append the hidden popup div on the footer of page240         \*/241        function wpb\_appendto\_footer() {242          if (isset($\_GET\['wpb\_preview'\]) && $\_GET\['wpb\_preview'\] && is\_user\_logged\_in()) {243            $default\_wpb\_id \= $popup\_banner\_id \= $\_GET\['banner\_id'\];244            global $wpdb;245            $table\_name \= $wpdb\->prefix . "popup\_banners";246            $popup\_details \= $wpdb\->get\_results("SELECT \* FROM $table\_name where id=$popup\_banner\_id");247            if (!empty($popup\_details)) {248              $arr\_data \= $this\->wpb\_get\_popup\_data();249                    $show\_popup \= $arr\_data\['show\_popup'\]; //show popup once, every time250                    $display\_on \= $arr\_data\['display\_on'\];251                    $page\_list \= $arr\_data\['page\_list'\];252253                    include('inc/frontend\_main\_popup.php'); //include the popup div for front end pages254                  }255                } else {256                $condition \= $this\->check\_popup\_condition(); //check the popup condition257258                if ($condition \== 1) {//if the condition is true259                  if (!isset($\_COOKIE\['wp\_popup\_once'\])) {260                    $wpb\_default\_settings \= get\_option('wpb\_default\_settings');261                    $default\_wpb\_id \= $wpb\_default\_settings\['default\_popup\_id'\];262                    global $wpdb;263                    $table\_name \= $wpdb\->prefix . "popup\_banners";264                    $popup\_details \= $wpdb\->get\_results("SELECT \* FROM $table\_name where id=$default\_wpb\_id");265                    if (!empty($popup\_details)) {266                      $arr\_data \= $this\->wpb\_get\_popup\_data();267                            $show\_popup \= $arr\_data\['show\_popup'\]; //show popup once, every time268                            $display\_on \= $arr\_data\['display\_on'\];269                            $page\_list \= $arr\_data\['page\_list'\];270271                            include('inc/frontend\_main\_popup.php'); //include the popup div for front end pages272                          }273                        }274                }//end of if condition275              }276            }277278        /\*\*279         \* check the conditions to display the popup280         \* and if true, reutrn 1 and if false, return 0281         \*/282        function check\_popup\_condition() {283          $wpb\_default\_settings \= get\_option('wpb\_default\_settings');284          if (isset($\_GET\['wpb\_preview'\]) && $\_GET\['wpb\_preview'\] && is\_user\_logged\_in()) {285            $wpb\_default\_settings\['check\_enable'\] \= 1;286            $wpb\_default\_settings\['default\_popup\_id'\] \= sanitize\_text\_field($\_GET\['banner\_id'\]);287          }288          if (($wpb\_default\_settings\['check\_enable'\] \== 1 && $wpb\_default\_settings\['default\_popup\_id'\] != '')) {289            global $post;290            if (is\_404()) {291              $post\_id \= '';292            } else {293                    $post\_id \= $post\->ID; //check the current page id294                  }295                  $arr\_data \= $this\->wpb\_get\_popup\_data();296                if (is\_home() && $arr\_data\['display\_on'\] != '3') {//check if the current page is home page297                  return 1;298                } else if ($arr\_data\['display\_on'\] \== '3' && !empty($arr\_data\['page\_list'\]) && $post\->post\_type \== 'page') {299                    /\*\*300                     \* check if the popup to display on only specific pages and301                     \* and if the current page belongs on the pages list302                     \*/303                    if (in\_array($post\_id, $arr\_data\['page\_list'\])) {304                      return 1;305                    }306                    if (is\_home()) {307                      return 0;308                    }309                  } else if ($arr\_data\['display\_on'\] \== '2') {310                    /\*\*311                     \* check if the popup to display on all pages and312                     \* current page is of 'page' type313                     \*/314                    return 1;315                  } else {316                    return 0; //return false if all conditions does not match317                  }318                }319              }320321              function print\_array($array) {322                echo "<pre style=\\"background:#fff;\\"\>";323                print\_r($array);324                echo "</pre>";325              }326327              function output\_converting\_br($text) {328                $text \= implode("\\n", explode(" ", $text));329                return $text;330              }331332              function sanitize\_escaping\_linebreaks($text) {333                $text \= implode(" ", explode("\\n", $text));334                return $text;335              }336337            }338339    $wpb\_object \= new WPB\_Class(); //initialization of plugin340  }341342  // end of plugin343344345346

CVE-2023-1471: wp-popup-banners.php in wp-popup-banners/trunk – WordPress Plugin Repository

Cross-Site Scripting (XSS) vulnerability in Erin Garscadden GC Testimonials plugin <= 1.3.2 versions.

**Solution**

Deactivate and delete. This plugin has been closed as of December 2, 2022 and is not available for download. This closure is temporary, pending a full review.

thiennv discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress GC Testimonials Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2022-45817: WordPress GC Testimonials plugin <= 1.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability - Patchstack

Stored Cross-Site Scripting (XSS) vulnerability in Fabian von Allmen WP Calendar plugin <= 1.5.3 versions.

**Solution**

Deactivate and delete. This plugin has been closed as of December 2, 2022 and is not available for download. This closure is temporary, pending a full review.

thiennv discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress WP Calendar Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

**No other known vulnerabilities for this plugin**Report

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

Tag

#wordpress