stellarwp WPComplete güvenlik açıkları (CVE)

6.4Orta

CVE-2026-77820 1 ay önce

WPComplete <= 2.9.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'empty' Shortcode Attribute

stellarwp WPComplete

The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in all versions up to, and including, 2.9.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

5.3Orta

CVE-2025-49906 1 yıl önce

WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability

StellarWP WPComplete

Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through <= 2.9.5.3.

6.5Orta

CVE-2025-58974 1 yıl önce

WordPress WPComplete Plugin <= 2.9.5.2 - Cross Site Scripting (XSS) Vulnerability

StellarWP WPComplete

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through <= 2.9.5.2.

6.5Orta

CVE-2025-50046 1 yıl önce

WordPress WPComplete plugin <= 2.9.5 - Cross Site Scripting (XSS) Vulnerability

StellarWP WPComplete

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through <= 2.9.5.