Back Button Widget (Wpfactory) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 28 known versions, newest CVE from 2025-05-19. Vendor: Wpfactory.

CVEs of Back Button Widget

• CVE-2025-48252 - CVSS 6.5 (medium), 2025-05-19: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Back Button Widget back-button-widget allows…
• CVE-2023-51399 - CVSS 6.5 (medium), 2023-12-29: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Back Button Widget allows Stored XSS.This…