Otwthemes

otwthemes

4 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Buttons Shortcode And Widget

buttons_shortcode_and_widget

Blog Manager Light

blog_manager_light

Tabs Shortcode And Widget

tabs_shortcode_and_widget

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-0719 1Otwthemes 1Tabs Shortcode And Widget Jun 17, 2026 Mar 18, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Tabs Shortcode and Widget WordPress plugin through 1.17 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users w...Show more The Tabs Shortcode and Widget WordPress plugin through 1.17 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacksShow less
CVE-2024-0711 1Otwthemes 1Buttons Shortcode And Widget Jun 17, 2026 Mar 18, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The Buttons Shortcode and Widget WordPress plugin through 1.16 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow user...Show more The Buttons Shortcode and Widget WordPress plugin through 1.16 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.Show less
CVE-2024-24930 1Otwthemes 1Buttons Shortcode And Widget Jun 17, 2026 Feb 12, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes.Com Buttons Shortcode and Widget allows Stored XSS.This issue affects Buttons Shortcode and Widget: from n/a...Show more Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes.Com Buttons Shortcode and Widget allows Stored XSS.This issue affects Buttons Shortcode and Widget: from n/a through 1.16.Show less
CVE-2023-45102 1Otwthemes 1Blog Manager Light Jun 17, 2026 Oct 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Blog Manager Light plugin <= 1.20 versions.