CVE-2024-30236

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through = 21.3.4...

CVE-2024-30236

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.4...

CVE-2024-30200

The CVE-2024-30200 entry describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress BEAR plugin (BEAR – Bulk Editor and Products Manager) by Pluginus.Net, affecting versions up to and including 1.1.4.2. The issue arises from insufficient input sanitization and output escaping...

CVE-2024-30200 WordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2...

CVE-2024-30239

CVE-2024-30239: Zoho Campaigns WordPress plugin is affected up to v2.0.6 with an SQL injection vulnerability due to improper/insufficient escaping. Connected sources indicate this entry has been patched in later versions; remediation is to upgrade to a newer release (beyond 2.0.6). Exploitation s...

CVE-2024-30240

The CVE-2024-30240 entry concerns the WordPress Calendarista plugin (versions up to 15.5.7). Root cause: improper neutralization of special elements in SQL commands leading to an SQL Injection vulnerability. Affects authenticated users with subscriber-level access and above; exploitation could al...

CVE-2024-30243

CVE-2024-30243 is an SQL Injection affecting the WordPress Tooltips plugin prior to 9.4.5, caused by improper neutralization of SQL elements. The metric indicates a base CVSS v3.1 score of 8.5 (HIGH) with network attack vector, low attack complexity, and user interaction NONE. Affected software: ...

CVE-2024-30244

CVE-2024-30244 affects the WordPress plugin Church Admin (versions

CVE-2024-28015

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2,...

WordPress Plugin DecaLog SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

WordPress Plugin WP Testimonials 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Plugin Church Admin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Plugin Wordpress Tooltips SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2024-30238

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through = 21.3.2...

CVE-2024-29765

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alireza Sedghi Aparat for WordPress allows Stored XSS.This issue affects Aparat for WordPress: from n/a through 2.2.0...

CVE-2024-29761

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Krunal Prajapati WP Post Disclaimer allows Stored XSS.This issue affects WP Post Disclaimer: from n/a through 1.0.3...

CVE-2024-29762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.8.1...

CVE-2024-29759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodePeople Calculated Fields Form allows Reflected XSS.This issue affects Calculated Fields Form: from n/a through 1.2.54...

CVE-2024-30238

CVE-2024-30238 affects the WordPress Photos and Files Contest Gallery plugin (

CVE-2024-29759

CVE-2024-29759 affects WordPress plugin Calculated Fields Form (CodePeople). Affected versions: up to 1.2.54. Root cause: improper neutralization of input during web page generation, enabling Reflected XSS. Public exploit details are not provided in the connected documents. No remediation details...