WordPress Security – 第 57 頁

香港安全通告存儲 XSS 滑塊(CVE20258690)

WordPress 簡易響應式滑塊插件 <= 2.0 - 已驗證 (貢獻者+) 存儲跨站腳本漏洞

WordPress Master Addons for Elementor plugin <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox vulnerability

WordPress RT Easy Builder 插件 <= 2.3 - 已驗證（貢獻者+）的存儲跨站腳本漏洞

WordPress Mosaic Generator 插件 <= 1.0.5 - 經身份驗證的 (貢獻者+) 通過 'c' 參數的存儲跨站腳本漏洞

WordPress Simple Local Avatars plugin <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration vulnerability

WordPress Wp chart generator plugin <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpchart Shortcode vulnerability

WordPress Inline Stock Quotes plugin <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock Shortcode vulnerability

WordPress GMap - Venturit 插件 <= 1.1 - 經過身份驗證的 (貢獻者+) 通過 'h' 參數漏洞的存儲跨站腳本

WordPress UiCore Elements 插件 <= 1.3.0 - 缺少對未經身份驗證的任意文件讀取的授權漏洞

WordPress AnWP 足球聯賽插件 <= 0.16.17 - 身份驗證 (管理員+) CSV 注入漏洞