CVE-2026-97297

Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...

CVE-2026-97297 WordPress Gratisfaction plugin <= 4.6.3 - Broken Access Control vulnerability

Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...

CVE-2026-97297

The Gratisfaction WordPress plugin (versions

CVE-2026-97297 WordPress Gratisfaction plugin <= 4.6.3 - Broken Access Control vulnerability

Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...

EUVD-2026-90841

Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...

WordPress Gratisfaction plugin <= 4.6.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by SecondGateWP in WordPress Plugin Gratisfaction versions = 4.6.3...

CVE-2026-97297: Missing Authorization

Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...

PT-2026-103895

Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...

EUVD-2024-26793

Malicious code in bioql PyPI...

CVE-2024-29798

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appsmav Gratisfaction allows Stored XSS.This issue affects Gratisfaction: from n/a through 4.3.4...

Gratisfaction < 4.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Gratisfaction plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to injec...

CVE-2024-29798

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appsmav Gratisfaction allows Stored XSS.This issue affects Gratisfaction: from n/a through 4.3.4...

CVE-2024-29798 WordPress Gratisfaction plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appsmav Gratisfaction allows Stored XSS.This issue affects Gratisfaction: from n/a through 4.3.4...

CVE-2024-29798

CVE-2024-29798 is a stored XSS in the Gratisfaction plugin for Gratisfaction (WooCommerce) with affected range listed as Gratisfaction: from n/a through 4.3.4. The CVE entry provides an improper input neutralization during web page generation, enabling stored cross-site scripting. The associated ...

CVE-2024-29798 WordPress Gratisfaction plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appsmav Gratisfaction allows Stored XSS.This issue affects Gratisfaction: from n/a through 4.3.4...

WordPress Plugin Gratisfaction Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-23042

Name of the Vulnerable Software and Affected Versions Appsmav Gratisfaction versions through 4.3.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious...

WordPress Gratisfaction Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Gratisfaction Type Plugin Vulnerable versions = 4.3.4 Fixed in 4.3.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29798 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 23596df169c6 Credits Ngô Thiên An ancorn from VNPT-VCI Requir...