| Package | Affected versions | Patched versions |
|---|---|---|
| woody ad snippets | < 2.2.8 | 2.2.8 |
The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free