← WordPress Vulnerabilities
WordPress security by component

Wassup Plugin

Wassup Plugin is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jun 15, 2012; the highest CVE/CNA score is 7.5.

Plugin slug: wassup-plugin

CVE-2012-2633: Wassup Plugin: Cross-site scripting

Wassup Plugin is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJun 15, 2012
Safe version guidanceSee mitigation notes
Safe version
Jun 15, 2012 CVE-2012-2633
Wassup Plugin: Cross-site scripting
Wassup Plugin is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.3
NVD4.3
Jan 31, 2008 CVE-2008-0520
Wassup Plugin: SQL injection
Wassup Plugin is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.5
NVD7.5