Drupal Git Utilities for Drupal module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Git Utilities for Drupal versions...

Drupal Allow All File Extensions for file fields module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Allow All File Extensions for file fields versions...

WordPress Property Hive Mortgage Calculator plugin <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via price Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Property Hive Mortgage Calculator versions = 1.0.6...

CVE-2023-49756 WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability

Missing Authorization vulnerability in Arraytics Eventin wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventin: from n/a through = 3.3.52...

WordPress Gallery plugin <= 1.3 - Authenticated (Contributor+) PHP Object Injection vulnerability

Authenticated Contributor+ PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Gallery versions = 1.3...

WordPress KiviCare – Clinic & Patient Management System (EHR) plugin <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection vulnerability

Authenticated Doctor/Receptionist+ SQL Injection vulnerability discovered by shaman0x01 in WordPress Plugin KiviCare versions = 3.6.4...

WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin Online Booking & Scheduling Calendar for WordPress by vcita versions = 4.5.1...

WordPress ONLYOFFICE Docs plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin ONLYOFFICE versions = 2.0.0...

WordPress 코드엠샵 소셜톡 plugin <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin 코드엠샵 소셜톡 versions = 1.2.0...

WordPress Gutentor plugin <= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Countdown Widget vulnerability discovered by Webbernaut in WordPress Plugin Gutentor versions = 3.3.9...

Drupal Megamenu Framework module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drew Webber in WordPress Module Megamenu Framework versions...

Drupal Print Anything module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drew Webber in WordPress Module Print Anything versions...

WordPress Accordion Slider plugin <= 1.9.12 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Accordion Slider versions = 1.9.12...

WordPress Responsive Lightbox plugin <= 2.4.8 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Responsive Lightbox versions = 2.4.8...

WordPress B Testimonial plugin <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin B Testimonial versions = 1.2.2...

WordPress Flower Delivery by Florist One plugin <= 3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Flower Delivery by Florist One versions = 3.9...

WordPress Dollie Hub plugin <= 6.2.0 - Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Dollie Hub versions = 6.2.0...

WordPress Funnelforms Free plugin <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection vulnerability

Authenticated Contributor+ PHP Object Injection vulnerability discovered by Peter Thaleikis in WordPress Plugin Funnelforms Free versions = 3.7.5.1...

CVE-2024-46625

An authenticated arbitrary file upload vulnerability exists in InfoDom Performa 365 v4.0.1 at the /documentCache/upload endpoint. The issue allows an attacker to execute arbitrary code by uploading a crafted SVG file. Connected sources corroborate the affected version and endpoint, and describe t...

WordPress Charity Addon for Elementor plugin <= 1.3.3 - Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Charity Addon for Elementor versions = 1.3.3...