← Back

Yofla

yofla

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
360 Product Rotation
360_product_rotation
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-13823
1Yofla
1360 Product Rotation
Jun 17, 2026
May 15, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthe...Show more
The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users.Show less
CVE-2019-15082
1Yofla
1360 Product Rotation
Jun 17, 2026
Aug 20, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.