Known CVE

WordPress Awin Data Feed <=1.6 - Cross-Site Scripting

WordPress Awin Data Feed plugin 1.6 and prior contains a cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back via an AJAX action, available to both unauthenticated and authenticated users.

CVE-2022-1937

Medium2022CVSS 6.1CWE-79

cve2022 · xss · awin · wpscan · wp-plugin · wp · wordpress · authenticated

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website