GCVE - cpe:2.3:a:wp_academic_people_list_project:wp_academic_people

Approved changes feed: RSS · Atom

cpe:2.3:a:wp_academic_people_list_project:wp_academic_people_list:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Wp Academic People List Project (`2e948bac-1a96-5fb7-a070-749ff40699ca`)
Product	Wp Academic People List (`b3a13752-9b7e-51af-a013-43bf513a562f`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-38316`	vulnerable	2026-06-08 05:32:55.878079	WP Academic People List <= 0.4.1 Reflected Cross-Site Scripting MEDIUM (6.1) The WP Academic People List WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the category_name parameter in the ~/admin-panel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.4.1. Published: 2021-09-09T18:09:41.799Z Updated: 2025-05-05T18:14:49.822Z Open on db.gcve.eu Reference links https://www.wordfence.com/vulnerability-advisories/#CVE-2021-38316 https://plugins.trac.wordpress.org/browser/wp-academic-people/tags/0.4.1/admin-panel.php#L57	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.