plugin

Wp Spreadplugin Vulnerabilities

6 known security issues reported for the Wp Spreadplugin WordPress plugin. Most recent disclosed Oct 16, 2024.

1 high 1 medium

Running Wp Spreadplugin on your site? Check whether your installed version is affected.

Scan your site free

WP-Spreadplugin [wp-spreadplugin] <= 4.8.9 (unfixed + closed)

unknown

[en] Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thimo Grauerholz WP-Spreadplugin allows Stored XSS.This issue affects WP-Spreadplugin: from n/a through 4.8.9.

Affected:
up to 4.8.9
Fix:
No patched version reported
Disclosed:
Oct 16, 2024

CVE-2024-49266 on NVD →

WP-Spreadplugin <= 4.8.9 - Authenticated (Administrator+) Stored Cross-Site Scripting

medium

The WP-Spreadplugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.8.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in page...

CVSS:
5.5
Affected:
up to 4.8.9
Fix:
No patched version reported
Disclosed:
Oct 14, 2024

CVE-2024-49266 on NVD →

WP-Spreadplugin [wp-spreadplugin] < 3.8.6.6 (closed)

unknown

[en] A vulnerability classified as problematic was found in Thimo Grauerholz WP-Spreadplugin up to 3.8.6.1 on WordPress. This vulnerability affects unknown code of the file spreadplugin.php. The manipulation of the argument Spreadplugin leads to cross site scripting. The attack can be initiated remotely. Upgrading to v...

Affected:
up to 3.8.6.6
Fixed in:
3.8.6.6
Disclosed:
Apr 21, 2024

CVE-2015-10132 on NVD →

WP SpreadPlugin < 3.8.6.2 - Cross-Site Scripting

high

The WP SpreadPlugin plugin for WordPress is vulnerable to Cross-Site Scripting in versions before 3.8.6.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.

CVSS:
7.1
Affected:
up to 3.8.6.2
Fixed in:
3.8.6.2
Disclosed:
Apr 21, 2015

CVE-2015-10132 on NVD →

WP-Spreadplugin [wp-spreadplugin] < 3.8.6.2 (closed)

unknown

The WP SpreadPlugin plugin for WordPress is vulnerable to Cross-Site Scripting in versions before 3.8.6.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.

Affected:
up to 3.8.6.2
Fixed in:
3.8.6.2
Disclosed:
Apr 21, 2015

WP-Spreadplugin [wp-spreadplugin] < 3.8.6.2 (closed)

unknown

The WP-Spreadplugin WordPress plugin was affected by a XSS security vulnerability.

Affected:
up to 3.8.6.2
Fixed in:
3.8.6.2

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database