WordPress Twitter real time search scrolling Plugin <= 7.0 is vulnerable to Cross Site Scripting (XSS)

Software Twitter real time search scrolling Type Plugin Vulnerable versions = 7.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51716 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5ded87af36a1 Credits SOPROBRO Required...

WordPress Content Syndication Toolkit Reader Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)

Software Content Syndication Toolkit Reader Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51696 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4c15b730abc5 Credits João Pedro S...

WordPress Loginizer Security Plugin <= 1.9.2 is vulnerable to Broken Authentication

Software Loginizer Security Type Plugin Vulnerable versions = 1.9.2 Fixed in 1.9.3 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-10097 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 39d130db7003 Credits...

WordPress Admin Amplify Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Admin Amplify Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51691 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6902915ddda2 Credits João Pedro S Alcântara Kinorth...

WordPress Realty by BestWebSoft Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Realty by BestWebSoft Type Plugin Vulnerable versions = 1.1.5 Fixed in 1.1.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51786 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4df8b0c61c8a Credits SOPROBRO Required privilege...

WordPress Responsive Filterable Portfolio Plugin <= 1.0.22 is vulnerable to Server Side Request Forgery (SSRF)

Software Responsive Filterable Portfolio Type Plugin Vulnerable versions = 1.0.22 Fixed in 1.0.23 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-51785 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID...

WordPress eewee admin custom Plugin <= 1.8.2.4 is vulnerable to Cross Site Scripting (XSS)

Software eewee admin custom Type Plugin Vulnerable versions = 1.8.2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51780 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4886c0ef8c81 Credits João Pedro S Alcântara Kinort...

WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.8.7 is vulnerable to Cross Site Scripting (XSS)

Software JS Help Desk – Best Help Desk & Support Plugin Type Plugin Vulnerable versions = 2.8.7 Fixed in 2.8.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51670 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ac0a5665f555 Credits casol...

WordPress ThemeFuse Maintenance Mode Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software ThemeFuse Maintenance Mode Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51645 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 3f380fad532f Credits SOPROBRO...

WordPress Easy Accordion Gutenberg Block Plugin <= 1.2.3 is vulnerable to Broken Access Control

Software Easy Accordion Gutenberg Block Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-51660 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f0700b913e2b Credits Trương Hữu Phú...

WordPress Webriti Custom Login Plugin <= 0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Webriti Custom Login Type Plugin Vulnerable versions = 0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-51634 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 2235b9bd113a Credits SOPROBRO Required privilege...

WordPress BetterLinks Plugin <= 2.1.7 is vulnerable to SQL Injection

Software BetterLinks Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51672 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 159a4550c364 Credits Marek Mikita Required privilege Administrator Publish...

WordPress aThemes Addons for Elementor Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software aThemes Addons for Elementor Type Plugin Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51675 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8c1a41b721e0 Credits Khalid Yusuf Required...

WordPress W3P SEO Plugin < 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software W3P SEO Type Plugin Vulnerable versions 1.8.6 Fixed in 1.8.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51684 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 58f497ee049b Credits SOPROBRO Required privilege...

WordPress Appointmind Plugin <= 4.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Appointmind Type Plugin Vulnerable versions = 4.0.0 Fixed in 4.1.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51679 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 55eaeba7d578 Credits SOPROBRO Required...

WordPress Cresta Addons for Elementor Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Software Cresta Addons for Elementor Type Plugin Vulnerable versions = 1.0.9 Fixed in 1.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51680 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e2f8a7fae053 Credits Gab Required privilege...

WordPress Accordion title for Elementor Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Accordion title for Elementor Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51685 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 52950207abc4 Credits Michael Required privile...

WordPress Skip To Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Skip To Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51652 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 971a937e4347 Credits SOPROBRO Required privilege...

WordPress Platform.ly Official Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Platform.ly Official Type Plugin Vulnerable versions = 1.1.3 Fixed in 1.14 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51687 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 8ba7cb51f2ab Credits SOPROBRO Requir...

WordPress Mobilize Plugin <= 3.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Mobilize Type Plugin Vulnerable versions = 3.0.7 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51649 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 686b496076f9 Credits SOPROBRO Required privilege...