WordPress Creative Blocks Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Creative Blocks Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51822 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 92ca1e6db3e1 Credits Gab Required privilege Contributor...

WordPress BU Slideshow Plugin <= 2.3.10 is vulnerable to Cross Site Scripting (XSS)

Software BU Slideshow Type Plugin Vulnerable versions = 2.3.10 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52351 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 35f550f0aa07 Credits SOPROBRO Required privilege Contributor...

WordPress Audio Record Plugin <= 1.0 is vulnerable to Arbitrary File Upload

Software Audio Record Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-51792 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 6342416d8183 Credits stealthcopter Required privilege Unauthenticate...

WordPress OSM – OpenStreetMap Plugin <= 6.1.2 is vulnerable to Cross Site Scripting (XSS)

Software OSM – OpenStreetMap Type Plugin Vulnerable versions = 6.1.2 Fixed in 6.1.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52355 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 68bca5f9bb55 Credits Junwoo Kang Required privilege...

WordPress L Squared Hub WP Plugin <= 1.0 is vulnerable to SQL Injection

Software L Squared Hub WP Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51820 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID b1c1c7bbdde2 Credits LVT-tholv2k Required privilege Contributor Published...

WordPress Olympus Shortcodes Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Olympus Shortcodes Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51857 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aec746b4a78a Credits SOPROBRO Required privilege Contribut...

WordPress Google Visualization Charts Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)

Software Google Visualization Charts Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51862 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1b29248315f5 Credits SOPROBRO Required privilege...

WordPress Bread & Butter Plugin <= 7.4.857 is vulnerable to Cross Site Scripting (XSS)

Software Bread & Butter Type Plugin Vulnerable versions = 7.4.857 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51802 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9da54844a736 Credits SOPROBRO Required privilege Contributor...

WordPress best bootstrap widgets for elementor Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software best bootstrap widgets for elementor Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51851 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3c6e5776818f Credits Gab Required privileg...

WordPress Pro Addons For Elementor Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Pro Addons For Elementor Type Plugin Vulnerable versions = 1.5.0 Fixed in 1.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51812 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b0c22c1328af Credits Gab Required privilege...

WordPress Popup Image Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Popup Image Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51811 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6d6327c85e67 Credits SOPROBRO Required privilege Contributor...

WordPress Anant Addons for Elementor Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Anant Addons for Elementor Type Plugin Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51813 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a1918ff11f57 Credits Gab Required privilege...

WordPress Social button Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Social button Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51866 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3298adb5e8ae Credits SOPROBRO Required privilege Contributor...

WordPress I Plant A Tree Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

Software I Plant A Tree Type Plugin Vulnerable versions = 1.7.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51883 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 73334290309f Credits SOPROBRO Required privilege Contributor...

WordPress Parallaxer Plugin <= 1.00 is vulnerable to Cross Site Scripting (XSS)

Software Parallaxer Type Plugin Vulnerable versions = 1.00 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51848 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 53fcc9a60f71 Credits SOPROBRO Required privilege Contributor...

WordPress Fancy User List Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Software Fancy User List Type Plugin Vulnerable versions = 3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51889 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 31e7eea63edb Credits SOPROBRO Required privilege Contributor...

WordPress audioCase Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software audioCase Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51909 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d56fe2f43db1 Credits SOPROBRO Required privilege Contributor...

WordPress WP Virtual Room Configurator Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Virtual Room Configurator Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51907 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 307fc19fd58d Credits SOPROBRO Required privilege...

WordPress Sell Media File with Stripe Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Sell Media File with Stripe Type Plugin Vulnerable versions = 1.0.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51892 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID af1c67b9897b Credits SOPROBRO Required privilege...

WordPress WP Listings Pro Plugin <= 3.0.14 is vulnerable to Cross Site Scripting (XSS)

Software WP Listings Pro Type Plugin Vulnerable versions = 3.0.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51903 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 421c376a6a04 Credits SOPROBRO Required privilege Contributor...