Approved changes feed: RSS · Atom

cpe:2.3:a:never5:post_connector:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorNever5 (b496f7b8-aa12-5df7-bca5-8fb19242b72f)
ProductPost Connector (065e0629-2b5a-516a-8117-2aae8a157506)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28931 vulnerable 2026-06-08 06:02:36.643168 WordPress Post Connector Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Never5 Post Connector plugin <= 1.0.9 versions.
Published: 2023-08-08T12:35:44.360Z
Updated: 2026-04-28T16:08:17.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9362 vulnerable 2026-06-08 05:07:13.608262 Details available
The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().
Published: 2019-08-28T11:54:30.000Z
Updated: 2024-08-06T08:51:03.224Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.