40384 matches found
WordPress Extensions by HocWP Team Plugin <= 0.2.3.2 is vulnerable to Broken Authentication
Software Extensions by HocWP Team Type Plugin Vulnerable versions = 0.2.3.2 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9930 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 7d51f78c234b Credit...
WordPress Monkee-Boy Essentials Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
Software Monkee-Boy Essentials Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9116 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f884d81aed76 Credits Francesco Carlucci...
WordPress Bstone Demo Importer Plugin <= 1.0.1 is vulnerable to Privilege Escalation
Software Bstone Demo Importer Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Privilege Escalation CVE CVE-2024-50481 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 598203db6a42 Credits stealthcopter Required privileg...
WordPress Signup Page Plugin <= 1.0 is vulnerable to Privilege Escalation
Software Signup Page Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-50475 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 15ed63623277 Credits Mika Required...
WordPress WP Query Console Plugin <= 1.0 is vulnerable to Remote Code Execution (RCE)
Software WP Query Console Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-50498 Patch priority High CVSS severity High 10 Developer Claim ownership PSID af5ddac5f157 Credits stealthcopter Required privilege...
WordPress WP-Members Plugin <= 3.4.9.5 is vulnerable to Cross Site Scripting (XSS)
Software WP-Members Type Plugin Vulnerable versions = 3.4.9.5 Fixed in 3.4.9.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10374 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b793b5e43f7e Credits Peter Thaleikis Required...
WordPress Stacks Mobile App Builder Plugin <= 5.2.3 is vulnerable to Broken Authentication
Software Stacks Mobile App Builder Type Plugin Vulnerable versions = 5.2.3 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-50477 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 02ff662824ca Credit...
WordPress Wux Blog Editor Plugin <= 3.0.0 is vulnerable to Broken Authentication
Software Wux Blog Editor Type Plugin Vulnerable versions = 3.0.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9931 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 140fce8f5a83 Credits István...
WordPress Poll Maker Plugin <= 5.4.6 is vulnerable to Cross Site Scripting (XSS)
Software Poll Maker Type Plugin Vulnerable versions = 5.4.6 Fixed in 5.4.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9462 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 285124c9b4b8 Credits Jonas Benjamin Friedli Requir...
WordPress Kata Plus Plugin <= 1.4.7 is vulnerable to Cross Site Scripting (XSS)
Software Kata Plus Type Plugin Vulnerable versions = 1.4.7 Fixed in 1.5.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50501 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 710165188cb5 Credits Michael Required privilege Contributor...
CVE-2024-46998
creationtimestamp| type| source ---|---|--- 2024-10-24 21:50:50+00:00| seen| https://t.me/cvedetector/8842...
CVE-2024-48144
creationtimestamp| type| source ---|---|--- 2024-10-24 21:50:43+00:00| seen| https://t.me/cvedetector/8837...
CVE-2024-48140
creationtimestamp| type| source ---|---|--- 2024-10-24 21:50:36+00:00| seen| https://t.me/cvedetector/8832...
CVE-2024-10338
creationtimestamp| type| source ---|---|--- 2024-10-24 21:00:24+00:00| seen| https://t.me/cvedetector/8829...
CVE-2024-38314
creationtimestamp| type| source ---|---|--- 2024-10-24 21:00:23+00:00| seen| https://t.me/cvedetector/8827...
CVE-2024-48440
creationtimestamp| type| source ---|---|--- 2024-10-24 21:00:17+00:00| seen| https://t.me/cvedetector/8824...
CVE-2024-48514
creationtimestamp| type| source ---|---|--- 2024-10-24 21:00:16+00:00| seen| https://t.me/cvedetector/8822...
CVE-2024-40810
creationtimestamp| type| source ---|---|--- 2024-10-24 20:10:01+00:00| seen| https://t.me/cvedetector/8818...