Add Actions And Filters Vulnerabilities

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Simpson Add Shortcodes Actions And Filters allows Reflected XSS.This issue affects Add Shortcodes Actions And Filters: from n/a through 2.10.

Affected:

up to 2.10

Fix:

No patched version reported

Disclosed:

Mar 31, 2024

CVE-2024-30558 on NVD →

The Add Shortcodes Actions And Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if the...

CVSS:

6.1

Affected:

up to 2.10

Fix:

No patched version reported

Disclosed:

Mar 29, 2024

CVE-2024-30558 on NVD →

[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin <= 2.0.9 versions.

Affected:

up to 2.10

Fixed in:

2.10

Disclosed:

Oct 26, 2023

CVE-2023-46072 on NVD →

The Add Shortcodes Actions And Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if th...

CVSS:

6.1

Affected:

up to 2.0.9

Fixed in:

2.10

Disclosed:

Oct 16, 2023

CVE-2023-46072 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin <= 2.0.9 versions.

Affected:

up to 2.10

Fixed in:

2.10

Disclosed:

Oct 10, 2023

CVE-2023-44475 on NVD →

The Add Shortcodes Actions And Filters plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.9. This is due to missing nonce validation on several functions such as settingsPage(). This makes it possible for unauthenticated attackers to modify the plugin's settings via a...

CVSS:

4.3

Affected:

up to 2.0.9

Fixed in:

2.10

Disclosed:

Sep 29, 2023

CVE-2023-44475 on NVD →

[en] Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability Add Shortcodes Actions And Filters plugin <= 2.0.9 at WordPress.

Affected:

up to 2.10

Fix:

No patched version reported

Disclosed:

Sep 23, 2022

CVE-2022-37342 on NVD →

The Add Shortcodes Actions And Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitr...

CVSS:

5.5

Affected:

up to 2.10

Fix:

No patched version reported

Disclosed:

Sep 12, 2022

CVE-2022-37342 on NVD →