ithemes authorize.net vulnerabilities

Latest ithemes authorize.net CVEs

Newest publication first

1. CVE-2015-9365 Authorize.net Add-on for iThemes Exchange < 1.1.0 - Reflected Cross-Site Scripting

   Published 2019-08-28

   Medium·CVSS 6.1 EPSS 0.95%

   Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.