Skip to content
Noroxi

wpsc-plugin records

5 published records for vendor wpsc-plugin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
20%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2023-49819
    39Monitor

    WordPress Structured Content Plugin <= 1.5.3 is vulnerable to PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    wpsc-plugin · structured contentDec 18, 2023

  • CVE-2022-4715
    21Monitor

    Structured Content < 1.5.1 - Contributor+ Stored XSS in Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    wpsc-plugin · structured contentJan 23, 2023

  • CVE-2023-49820
    21Monitor

    WordPress Structured Content Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    wpsc-plugin · structured contentDec 14, 2023

  • CVE-2024-24839
    21Monitor

    WordPress Structured Content Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    wpsc-plugin · structured contentFeb 5, 2024

  • CVE-2025-0512
    21Monitor

    Structured Content (JSON-LD) #wpsc <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    wpsc-plugin · structured contentMar 4, 2025