Better Find And Replace Ai Powered Suggestions
Monthly
Stored cross-site scripting in Better Find and Replace WordPress plugin (versions ≤1.7.9) allows authenticated attackers with Author-level privileges or above to inject arbitrary web scripts via the title field of uploaded images. The injected script executes in the browsers of any user who accesses a page containing the malicious image, potentially leading to session hijacking or phishing attacks. No active exploitation or public proof-of-concept is reported.
Stored cross-site scripting in Better Find and Replace WordPress plugin (versions ≤1.7.9) allows authenticated attackers with Author-level privileges or above to inject arbitrary web scripts via the title field of uploaded images. The injected script executes in the browsers of any user who accesses a page containing the malicious image, potentially leading to session hijacking or phishing attacks. No active exploitation or public proof-of-concept is reported.