| Package | Affected versions | Patched versions |
|---|---|---|
| commentluv | = 2.7= 2.71= 2.74= 2.76= 2.761= 2.762= 2.763= 2.764= 2.765= 2.766= 2.767= 2.768= 2.769= 2.7691= 2.80= 2.81= 2.81.1= 2.81.2= 2.81.3= 2.81.4= 2.81.5= 2.81.6= 2.81.7= 2.81.8= 2.90.1= 2.90.3= 2.90.5= 2.90.6= 2.90.7= 2.90.8= 2.90.8.1= 2.90.8.2= 2.90.8.3= 2.90.9= 2.90.9.1= 2.90.9.2= 2.90.9.3= 2.90.9.4= 2.90.9.5= 2.90.9.6= 2.90.9.7= 2.90.9.8= 2.90.9.9= 2.90.9.9.1= 2.90.9.9.2= 2.90.9.9.3= 2.91= 2.91.1= 2.92= 2.92.1= 2.92.2≤ 2.92.3 |
Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _ajax_nonce parameter to wp-admin/admin-ajax.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free