Skip to content

I Thirteen Web Solution · weakness class

Cross-site Scripting

17 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

  1. WordPress Easy Testimonial Slider and Form Plugin <= 1.0.18 is vulnerable to Cross Site Scripting (XSS)CVE-2023-45754I Thirteen Web Solution · CVSS 5.9 · 0.5% likely

    CWE-79

  2. WordPress Post Sliders & Post Grids Plugin <= 1.0.20 is vulnerable to Cross Site Scripting (XSS)CVE-2023-47226I Thirteen Web Solution · CVSS 5.9 · 0.5% likely

    CWE-79

  3. WordPress Email Subscription Popup Plugin <= 1.2.16 is vulnerable to Cross Site Scripting (XSS)CVE-2023-30489I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  4. WordPress Video Grid Plugin <= 1.21 is vulnerable to Cross Site Scripting (XSS)CVE-2023-30785I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  5. WordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)CVE-2023-28792I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  6. WordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)CVE-2023-28776I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  7. WordPress wordpress vertical image slider plugin Plugin <= 1.2.16 is vulnerable to Cross Site Scripting (XSS)CVE-2023-24413I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  8. WordPress WP Responsive Tabs horizontal vertical and accordion Tabs Plugin <= 1.1.15 is vulnerable to Cross Site Scripting (XSS)CVE-2023-24409I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  9. WordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)CVE-2023-24392I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  10. WordPress Mass Email To users Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)CVE-2022-47600I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  11. WordPress Easy Testimonial Slider and Form Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)CVE-2022-46799I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  12. WordPress wordpress publish post email notification Plugin <= 1.0.2.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-41731I Thirteen Web Solution · CVSS 5.9 · 0.4% likely

    CWE-79

  13. WordPress Photo Gallery Slideshow & Masonry Tiled Gallery Plugin <= 1.0.13 is vulnerable to Cross Site Scripting (XSS)CVE-2023-41658I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  14. WordPress video carousel slider with lightbox Plugin <= 1.0.22 is vulnerable to Cross Site Scripting (XSS)CVE-2023-32797I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  15. WordPress Video Gallery Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)CVE-2023-32597I Thirteen Web Solution · CVSS 7.1 · 0.4% likely

    CWE-79

  16. WordPress Email Subscription Popup plugin <= 1.2.20 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-27960I Thirteen Web Solution · CVSS 7.1 · 0.3% likely

    CWE-79

  17. WordPress WP Responsive Tabs horizontal vertical and accordion Tabs plugin <= 1.1.17 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-27989I Thirteen Web Solution · CVSS 6.5 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.