WordPress Picture Gallery Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)

Software Picture Gallery Type Plugin Vulnerable versions = 1.5.11 Fixed in 1.5.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34759 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7f72e4ecfdc5 Credits Rayhan Ramdhany Hanaputra Required...

WordPress Stockholm Theme <= 9.6 is vulnerable to Local File Inclusion

Software Stockholm Type Theme Vulnerable versions = 9.6 Fixed in 9.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-34552 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 85b9ed51ce3f Credits Rafie Muhammad Patchstack Required privilege...

WordPress TT Custom Post Type Creator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software TT Custom Post Type Creator Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34430 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0c53513c230b Credits alfido osdie Patchstack Allian...

WordPress Corona Virus (COVID-19) Banner & Live Data Plugin <= 1.8.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Corona Virus COVID-19 Banner & Live Data Type Plugin Vulnerable versions = 1.8.0.3 Fixed in 1.8.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34429 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cdf584b63570 Credits Rayhan...

WordPress Mooberry Book Manager Plugin <= 4.15.12 is vulnerable to Sensitive Data Exposure

Software Mooberry Book Manager Type Plugin Vulnerable versions = 4.15.12 Fixed in 4.15.13 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-34368 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8048e91588cf Credits Steven Julian...

WordPress TweetScroll Widget Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

Software TweetScroll Widget Type Plugin Vulnerable versions = 1.3.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33948 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 3dc090758c1a Credits Joshua Chan Required privilege...

WordPress Custom field finder Plugin <= 0.3 is vulnerable to PHP Object Injection

Software Custom field finder Type Plugin Vulnerable versions = 0.3 Fixed in 0.4 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-33641 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 73f25d40c87c Credits CatFather Required privilege Author...

WordPress Pretty Google Calendar Plugin <= 1.7.2 is vulnerable to Cross Site Scripting (XSS)

Software Pretty Google Calendar Type Plugin Vulnerable versions = 1.7.2 Fixed in 2.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33640 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e6c5ddcc221c Credits LVT-tholv2k Required privilege...

WordPress All-in-one Like Widget Plugin <= 2.2.7 is vulnerable to Cross Site Scripting (XSS)

Software All-in-one Like Widget Type Plugin Vulnerable versions = 2.2.7 Fixed in 2.2.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32815 Patch priority Low CVSS severity Low 5.9 Developer Jeroen Peters PSID 19340c2d052a Credits Joshua Chan Required privilege...

WordPress The Pack Elementor addons Plugin <= 2.0.8.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software The Pack Elementor addons Type Plugin Vulnerable versions = 2.0.8.3 Fixed in 2.0.8.4 OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-32785 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID ee4b9205bc32 Credits Le Ngoc Anh...

WordPress Coupon & Discount Code Reveal Button Plugin <=1.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Coupon & Discount Code Reveal Button Type Plugin Vulnerable versions =1.2.5 Fixed in 1.2.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32722 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID abdf37204c70 Credits emad Required...

WordPress WP-Recall Plugin <= 16.26.5 is vulnerable to SQL Injection

Software WP-Recall Type Plugin Vulnerable versions = 16.26.5 Fixed in 16.26.6 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-32709 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 71deaedbb460 Credits LVT-tholv2k Required privilege Unauthenticated...

WordPress DirectoryPress Plugin <= 3.6.7 is vulnerable to Cross Site Scripting (XSS)

Software DirectoryPress Type Plugin Vulnerable versions = 3.6.7 Fixed in 3.6.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32567 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b3b3b9f83549 Credits Yudistira Arya Required privilege...

WordPress Master Slider Plugin <= 3.9.5 is vulnerable to PHP Object Injection

Software Master Slider Type Plugin Vulnerable versions = 3.9.5 Fixed in 3.9.7 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-32600 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID d3cbc5a0e9db Credits Rafie Muhammad Patchstack Required privile...

WordPress Import Users from CSV Plugin <= 1.2 is vulnerable to PHP Object Injection

Software Import Users from CSV Type Plugin Vulnerable versions = 1.2 Fixed in 1.3 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-32431 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID e3f19c84ef38 Credits Trình Vũ Sonicrrrr from VNPT-VCI Require...

WordPress Realtyna Organic IDX plugin Plugin <= 4.14.4 is vulnerable to SQL Injection

Software Realtyna Organic IDX plugin Type Plugin Vulnerable versions = 4.14.4 Fixed in 4.14.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-32128 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID df09fa02a23c Credits Joshua Chan Required privilege...

WordPress BA Book Everything Plugin <= 1.6.4 is vulnerable to SQL Injection

Software BA Book Everything Type Plugin Vulnerable versions = 1.6.4 Fixed in 1.6.5 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-32125 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID d47407126364 Credits Thanh Nam Tran Required privilege Contributor...

WordPress Easy Social Share Buttons Plugin <= 9.4 is vulnerable to Local File Inclusion

Software Easy Social Share Buttons Type Plugin Vulnerable versions = 9.4 Fixed in 9.5 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-31300 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 770673a69613 Credits Rafie Muhammad Patchstack Required...

WordPress Download Monitor Plugin <= 4.9.4 is vulnerable to SQL Injection

Software Download Monitor Type Plugin Vulnerable versions = 4.9.4 Fixed in 4.9.5 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30501 Patch priority Low CVSS severity Low 7.6 Developer WPChill PSID 3e76ad1985a5 Credits movrment Required privilege Administrator Published 28...

WordPress B Slider - Slider for your block editor Plugin <= 1.1.15 is vulnerable to Cross Site Scripting (XSS)

Software B Slider - Slider for your block editor Type Plugin Vulnerable versions = 1.1.15 Fixed in 1.1.16 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30432 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0e9fb06ed18e Credits Jean Tirstan...