The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Starbox WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like the malicious user's profile or pages where the starbox shortcode is used, which may be abused by users with at least the contributor role to conduct Stored XSS attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Starbox Plugin | — | Update starbox plugin to version 3.5.3, or a newer patched version | May 15, 2025 | Sep 9, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub