plugin

Pagination Vulnerabilities

8 known security issues reported for the Pagination WordPress plugin. Most recent disclosed Jun 22, 2023.

3 medium

Running Pagination on your site? Check whether your installed version is affected.

Scan your site free

Pagination by BestWebSoft &#8211; Customizable WordPress Content Splitter and Navigation Plugin [pagination] < 1.2.3

unknown

[en] Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BestWebSoft Pagination plugin <= 1.2.2 versions.

Affected:
up to 1.2.3
Fixed in:
1.2.3
Disclosed:
Jun 22, 2023

CVE-2023-28778 on NVD →

Pagination by BestWebSoft <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

medium

The Pagination by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-level access, and above, to inject arbitrary web scrip...

CVSS:
4.4
Affected:
up to 1.2.2
Fixed in:
1.2.3
Disclosed:
Mar 27, 2023

CVE-2023-28778 on NVD →

Pagination by BestWebSoft < 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

medium

The Pagination by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to in...

CVSS:
4.4
Affected:
up to 1.2.2
Fixed in:
1.2.3
Disclosed:
Mar 23, 2023

Pagination by BestWebSoft &#8211; Customizable WordPress Content Splitter and Navigation Plugin [pagination] < 1.2.3

unknown

The Pagination by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to in...

Affected:
up to 1.2.3
Fixed in:
1.2.3
Disclosed:
Mar 23, 2023

Pagination by BestWebSoft &#8211; Customizable WordPress Content Splitter and Navigation Plugin [pagination] < 1.0.7

unknown

[en] The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.

Affected:
up to 1.0.7
Fixed in:
1.0.7
Disclosed:
Aug 20, 2019

CVE-2017-18527 on NVD →

Pagination by BestWebSoft &#8211; Customizable WordPress Content Splitter and Navigation Plugin [pagination] < 1.0.7

unknown

[en] Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2,...

Affected:
up to 1.0.7
Fixed in:
1.0.7
Disclosed:
May 22, 2017

CVE-2017-2171 on NVD →

Pagination by BestWebSoft <= 1.0.6 - Multiple Cross-Site Scripting

medium

The Pagination by BestWebSoft plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.

CVSS:
6.1
Affected:
up to 1.0.6
Fixed in:
1.0.7
Disclosed:
Apr 12, 2017

CVE-2017-18527 on NVD →

Pagination by BestWebSoft &#8211; Customizable WordPress Content Splitter and Navigation Plugin [pagination] < 1.0.7

unknown
Affected:
up to 1.0.7
Fixed in:
1.0.7

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database