Approved changes feed: RSS · Atom

cpe:2.3:a:unconfirmed_project:unconfirmed:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorUnconfirmed Project (30511e6e-c9dd-54a7-91ae-a841989f7304)
ProductUnconfirmed (d0757bcd-bb75-588b-8324-ff65e7305c84)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-100018 vulnerable 2026-06-08 05:05:15.420617 Details available
Cross-site scripting (XSS) vulnerability in the Unconfirmed plugin before 1.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in the unconfirmed page to wp-admin/network/users.php.
Published: 2015-01-13T15:00:00.000Z
Updated: 2024-09-16T22:25:58.070Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.