CVE-2018-10752

The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action.

• CWE-79

• https://pastebin.com/ZGr5tyP2Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/45225/Exploit, Third Party Advisory, VDB Entry
• https://pastebin.com/ZGr5tyP2Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/45225/Exploit, Third Party Advisory, VDB Entry

Published

May 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10747An issue was discovered on D-Link DSL-3782 EU 1.01 devices. …
• CVE-2018-10748An issue was discovered on D-Link DSL-3782 EU 1.01 devices. …
• CVE-2018-10749An issue was discovered on D-Link DSL-3782 EU 1.01 devices. …
• CVE-2018-1075ovirt-engine up to version 4.2.3 is vulnerable to an unfilte…5
• CVE-2018-10750An issue was discovered on D-Link DSL-3782 EU 1.01 devices. …
• CVE-2018-10751A malformed OMACP WAP push message can cause memory corrupti…
• CVE-2018-10753Stack-based buffer overflow in the delayed_output function i…9.8
• CVE-2018-10754Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-10755Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-10756Use-after-free in libtransmission/variant.c in Transmission …7.8
• CVE-2018-10757CSP MySQL User Manager 2.3.1 allows SQL injection, and resul…
• CVE-2018-10758The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a dele…