CVE Vulnerability

CWE-79

CVE-2019-14791

by

The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter.

CVE-2019-14792

by

The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter.

CVE-2019-14795

by

The toggle-the-title (aka Toggle The Title) plugin 1.4 for WordPress has XSS via the wp-admin/admin-ajax.php?action=update_title_options isAutoSaveValveChecked or isDisableAllPagesValveChecked parameter.

CVE-2019-14796

by

The mq-woocommerce-products-price-bulk-edit (aka Woocommerce Products Price Bulk Edit) plugin 2.0 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=update_options show_products_page_limit parameter.

CVE-2019-14797

by

The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS.

CVE-2019-14799

by

The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.