Skip to content

Known CVE

WOOF WordPress plugin - Cross-Site Scripting

The WOOF WordPress plugin does not sanitize or escape the woof_redraw_elements parameter before reflecting it back in an admin page, leading to a reflected cross-site scripting.

CVE-2021-25085

Medium2021CVSS 6.1CWE-79

cve2021 · wordpress · wp-plugin · wp · xss · wpscan · pluginus · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website