plugin

Wp Noexternallinks Vulnerabilities

2 known security issues reported for the Wp Noexternallinks WordPress plugin. Most recent disclosed May 29, 2017.

1 high 1 medium

Running Wp Noexternallinks on your site? Check whether your installed version is affected.

WP No External Links < 3.5.19 - Reflected Cross-Site Scripting

medium

Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.

CVSS:: 6.1
Affected:: up to 3.5.19
Fixed in:: 3.5.19
Disclosed:: May 29, 2017

CVE-2017-15863 on NVD →

WP No External Links < 3.5.16 - Reflected Cross-Site Scripting

high

The WP No External Links plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in versions before 3.5.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they...

CVSS:: 7.1
Affected:: up to 3.5.16
Fixed in:: 3.5.16
Disclosed:: Jul 14, 2016

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database