WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the fieldnameDomain parameter. Attackers can inject JavaScript payloads through the plugin settings form at options.php that execute in the browsers of administrators viewing the settings page.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp24 Domain Check Plugin | — | Update wp24-domain-check plugin to version 1.6.3, or a newer patched version | Jul 30, 2026 | Jan 6, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub