WordPress CVEs

Description

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in wpWax Team plugin <= 1.2.6 at WordPress.

Affected WordPress components

• adl-team Plugin · adl-team
  Confirmed match Homeless
  From <= 1.2.6 (including) to 1.2.6 (including)
  View on WordPress.org
• Team Showcase Plugin · team
  Possible match Active
  Up to and including 1.2.6
  View on WordPress.org
• Team Theme · team
  Possible match Abandoned
  Up to and including 1.2.6
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• wpWax Team (WordPress plugin) — From <= 1.2.6 (including) to 1.2.6 (including)
• wpwax team — Up to and including 1.2.6

References

• patchstack.com https://patchstack.com/database/vulnerability/adl-team/wordpress-team-plugin-1-2-6-multiple-stored-cross-site-scripting-xss-vulnerabilities Third Party Advisory
• wordpress.org https://wordpress.org/plugins/adl-team/#description Third Party Advisory
• nvd.nist.gov Official NVD record