# XSS sårbarhet påvirker flere Wordpress plugins **URL:** \ **Category:** Webutvikling\ **Created:** [april 22, 2015, 2:24pm UTC](http://webforumet.no/t/xss-sarbarhet-pavirker-flere-wordpress-plugins/23483 "2015-04-22T14:24:18Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![xdex](http://webforumet.no/letter_avatar_proxy/v4/letter/x/c89c15/32.png) [@xdex](http://webforumet.no/u/xdex)\ **Post date:** [april 22, 2015, 2:24pm UTC](http://webforumet.no/t/xss-sarbarhet-pavirker-flere-wordpress-plugins/23483/1 "2015-04-22T14:24:18Z")
Det er funnet feil, som gjør at svært mange plugins er berørt. > Multiple WordPress Plugins are vulnerable to Cross-site Scripting (XSS) due to the misuse of theadd\_query\_arg() and remove\_query\_arg() functions. These are popular functions used by developers to modify and add query strings to URLs within WordPress. Noen plugins som er på listen [ul] [li]Jetpack[/li][li]WordPress SEO[/li][li]Google Analytics by Yoast[/li][li]All In one SEO[/li][li]Gravity Forms[/li][li]Multiple Plugins from Easy Digital Downloads[/li][li]UpdraftPlus[/li][li]WP-E-Commerce[/li][li]WPTouch[/li][li]Download Monitor[/li][li]Related Posts for WordPress[/li][li]My Calendar[/li][li]P3 Profiler[/li][li]Give[/li][li]Multiple iThemes products including Builder and Exchange[/li][li]Broken-Link-Checker[/li][li]Ninja Forms[/li][/ul] Blir ikke overrasket om det er flere. Source: [https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html](https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html) ---
**Author:** ![zapotek](http://webforumet.no/letter_avatar_proxy/v4/letter/z/3be4f8/32.png) [@zapotek](http://webforumet.no/u/zapotek)\ **Post date:** [april 22, 2015, 3:24pm UTC](http://webforumet.no/t/xss-sarbarhet-pavirker-flere-wordpress-plugins/23483/2 "2015-04-22T15:24:49Z")
Takk for tipset. (da er det bare å slenge seg på en oppdateringsrunde)