Vulnerabilities (CVE)

Filtered by vendor Connekthq Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-50874 1 Connekthq 1 Ajax Load More 2024-01-04 N/A 5.4 MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1.
CVE-2021-24334 1 Connekthq 1 Instant Images - One Click Unsplash Uploads 2021-06-11 3.5 LOW 5.4 MEDIUM
The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/upload.php?page=instant-images), only validating them client side before saving them, leading to a Stored Cross-Site Scripting issue.