plugin

Kintpv Connect Vulnerabilities

2 known security issues reported for the Kintpv Connect WordPress plugin. Most recent disclosed Dec 31, 2024.

1 high

Running Kintpv Connect on your site? Check whether your installed version is affected.

KinTPV WooConnect [kintpv-connect] <= 8.129 (unfixed)

unknown

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kinhelios Kintpv Wooconnect allows Stored XSS.This issue affects Kintpv Wooconnect: from n/a through 8.129.

Affected:: up to 8.129
Fix:: No patched version reported
Disclosed:: Dec 31, 2024

CVE-2024-56233 on NVD →

Kintpv Wooconnect <= 8.129 - Unauthenticated Stored Cross-Site Scripting

high

The Kintpv Wooconnect plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 8.129 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user...

CVSS:: 7.2
Affected:: up to 8.129
Fixed in:: 8.141
Disclosed:: Dec 19, 2024

CVE-2024-56233 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database