← Back

Pootlepress

pootlepress

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Pootle Button
pootle_button
1 CVE
Easy Smooth Scroll Links
easy_smooth_scroll_links
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-0728
1Pootlepress
1Easy Smooth Scroll Links
Jun 17, 2026
Apr 11, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered...Show more
The Easy Smooth Scroll Links WordPress plugin before 2.23.1 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowedShow less
CVE-2017-15811
1Pootlepress
1Pootle Button
May 13, 2026
Oct 23, 2017
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php.