plugin

Ruven Toolkit Vulnerabilities

3 known security issues reported for the Ruven Toolkit WordPress plugin. Most recent disclosed Dec 27, 2019.

1 medium

Running Ruven Toolkit on your site? Check whether your installed version is affected.

Ruven Toolkit [ruven-toolkit] <= 2.0 (unfixed)

unknown

[en] Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup parameter.

Affected:: up to 2.0
Fix:: No patched version reported
Disclosed:: Dec 27, 2019

CVE-2014-4548 on NVD →

Ruven Toolkit [ruven-toolkit] < 1.2 (closed)

unknown

This plugin is prone to a reflected cross site scripting vulnerability via tinymce/popup.php popup parameter. Update the plugin.

Affected:: up to 1.2
Fixed in:: 1.2
Disclosed:: Aug 1, 2014

Ruven Toolkit <= 2.0 - Reflected Cross-Site Scripting

medium

Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup parameter.

CVSS:: 6.1
Affected:: up to 2.0
Fix:: No patched version reported
Disclosed:: Jun 12, 2014

CVE-2014-4548 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database