GCVE - cpe:2.3:a:zeen101:leaky_paywall:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zeen101:leaky_paywall:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Zeen101 (`3b8e8dbe-9be5-5965-80e1-8b2097f24af3`)
Product	Leaky Paywall (`d4de6b66-5662-526e-a3ef-fccc285f8fad`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-39357`	vulnerable	2026-06-08 05:33:50.134648	Leaky Paywall <= 4.16.5 Authenticated Stored Cross-Site Scripting MEDIUM (5.5) The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the ~/class.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.16.5. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. Published: 2021-10-21T19:38:30.480Z Updated: 2025-02-14T17:55:12.748Z Open on db.gcve.eu Reference links https://plugins.trac.wordpress.org/changeset/2615195/leaky-paywall/trunk/class.php https://wordfence.com/vulnerability-advisories/#CVE-2021-39357 https://github.com/BigTiger2020/word-press/blob/main/Leaky%20Paywall.md	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.