CVE-2010-4747

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.51%

Published

Mar 1, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBWordPress Plugin Processing Embed 0.5 - 'pluginurl' Cross-Site Scripting

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pluginurl parameter.

Weaknesses (CWE)

CWE-79

Affected Products (2)

ahmattox · processing_embed_pluginvulnerable

wordpress · wordpress

References (10)

http://secunia.com/advisories/42545

Exploit

http://www.johnleitch.net/Vulnerabilities/WordPress.Processing.Embed.0.5.Reflected.Cross-site.Scripting/65

Exploit

http://www.osvdb.org/69764

Exploit

http://www.securityfocus.com/bid/45266

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/63761

http://secunia.com/advisories/42545

Exploit

http://www.johnleitch.net/Vulnerabilities/WordPress.Processing.Embed.0.5.Reflected.Cross-site.Scripting/65

KEV Catalog EPSS Scores Vendors All CVEs