Wp Custom Cursors | Wordpress Cursor Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_custom_cursors_|_wordpress_cursor_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Custom Cursors | Wordpress Cursor Plugin (8870d937-6c2d-500f-a6a0-346457dd3f5e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5911 |
vulnerable | 2026-06-08 06:19:45.090937 |
WP Custom Cursors <= 3.2 - Admin+ Stored XSS
The WP Custom Cursors | WordPress Cursor Plugin WordPress plugin through 3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2024-01-08T19:00:37.176Z
Updated: 2025-06-18T16:03:35.125Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2221 |
vulnerable | 2026-06-08 06:02:41.639397 |
WP Custom Cursors < 3.2 - Admin+ SQLi
The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.
Published: 2023-06-19T10:52:42.024Z
Updated: 2024-12-12T21:05:26.061Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3150 |
vulnerable | 2026-06-08 05:47:19.562313 |
WP Custom Cursors < 3.2 - Admin+ SQLi
The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privileged users such as admin
Published: 2022-10-17T00:00:00.000Z
Updated: 2025-05-14T16:16:21.491Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.