WordPress CF7 File Download – File Download for CF7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software CF7 File Download – File Download for CF7 Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-33697 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 07cbdf580a98 Credits...

WordPress Arconix Shortcodes Plugin <= 2.1.10 is vulnerable to Broken Access Control

Software Arconix Shortcodes Type Plugin Vulnerable versions = 2.1.10 Fixed in 2.1.11 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4233 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 049f969c5895 Credits Dhabaleshwar Das Required...

WordPress Ultimate Posts Widget Plugin <= 2.2.9 is vulnerable to Broken Access Control

Software Ultimate Posts Widget Type Plugin Vulnerable versions = 2.2.9 Fixed in 2.3.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31435 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 565122e43072 Credits Dhabaleshwar Das Requir...

WordPress WP-Members Plugin <= 3.4.9.3 is vulnerable to Sensitive Data Exposure

Software WP-Members Type Plugin Vulnerable versions = 3.4.9.3 Fixed in 3.4.9.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2920 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7f772dce8825 Credits Tim Coen Required privilege...

WordPress Althea WP Theme <= 1.0.13 is vulnerable to Broken Access Control

Software Althea WP Type Theme Vulnerable versions = 1.0.13 Fixed in 1.0.16 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33686 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 89e5f642c59b Credits Dhabaleshwar Das Required privileg...

Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup To replicate this vulnerability, follo...

Carousel Slider < 2.2.10 - Editor+ Stored XSS

Description The plugin does not validate and escape some of its Slide options before outputting them back in the page/post where the related Slide shortcode is embed, which could allow users with the Editor role and above to perform Stored Cross-Site Scripting attacks As an Editor, create/edit a...

CVE-2024-2947

creationtimestamp| type| source ---|---|--- 2024-04-09 20:12:43+00:00| seen| https://t.me/arpsyndicate/4412 2025-06-26 13:50:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19594...

Adobe Animate 23.x < 23.0.5 / 24.x < 24.0.2 Multiple Vulnerabilities (APSB24-26)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 23.0.5 or 24.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-26 advisory. - Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerabili...

CVE-2016-7567 affecting package openslp for versions less than 2.0.0-26

CVE-2016-7567 affecting package openslp for versions less than 2.0.0-26. A patched version of the package is available...

mbadiscovery.com.au Cross Site Scripting vulnerability OBB-3887144

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fr.bijouxenvogue.com Cross Site Scripting vulnerability OBB-3887049

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tgstat.ru Cross Site Scripting vulnerability OBB-3887018

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bookingfree.net Cross Site Scripting vulnerability OBB-3886805

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

okfish.cz Cross Site Scripting vulnerability OBB-3886792

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

images.knowing-jesus.com Cross Site Scripting vulnerability OBB-3886756

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

harrisbirt.co.uk Cross Site Scripting vulnerability OBB-3886598

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eiken.no Cross Site Scripting vulnerability OBB-3886102

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rosss.ie Cross Site Scripting vulnerability OBB-3885992

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Check & Log Email Plugin <= 1.0.9 is vulnerable to Broken Access Control

Software Check & Log Email Type Plugin Vulnerable versions = 1.0.9 Fixed in 1.0.10 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-0866 Patch priority Low CVSS severity Low 8.1 Developer Claim ownership PSID 0ac766d27e85 Credits Sean Murphy Required...