WordPress The Novel Design Store Directory Plugin <= 4.3.0 is vulnerable to Arbitrary File Upload

Software The Novel Design Store Directory Type Plugin Vulnerable versions = 4.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-51788 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 7c858add083e Credits stealthcopter Required...

WordPress Lenxel Core for Lenxel(LNX) LMS Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Lenxel Core for LenxelLNX LMS Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9270 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bea8ca18e070 Credits Francesco...

WordPress Trendy Restaurant Menu Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Trendy Restaurant Menu Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51796 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5538c79e9ace Credits SOPROBRO Required privilege...

WordPress WP Virtual Room Configurator Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Virtual Room Configurator Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51907 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 307fc19fd58d Credits SOPROBRO Required privilege...

WordPress Countdown Timer Plugin <= 1.2.4 is vulnerable to Sensitive Data Exposure

Software Countdown Timer Type Plugin Vulnerable versions = 1.2.4 Fixed in 1.2.5 OWASP Top 10 A3: Injection Classification Sensitive Data Exposure CVE CVE-2024-10669 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 97d2e3a5c021 Credits Francesco Carlucci Required privilege...

WordPress L Squared Hub WP Plugin <= 1.0 is vulnerable to SQL Injection

Software L Squared Hub WP Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51820 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID b1c1c7bbdde2 Credits LVT-tholv2k Required privilege Contributor Published...

WordPress Storely Theme <= 14.7 is vulnerable to Cross Site Scripting (XSS)

Software Storely Type Theme Vulnerable versions = 14.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51794 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 445ba07ef882 Credits stealthcopter Required privilege Contributor...

WordPress RSV 360 View Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software RSV 360 View Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51906 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 10130673798c Credits SOPROBRO Required privilege Contributor...

WordPress Easy Social Sharebar Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Easy Social Sharebar Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51833 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 39ebcdfedab1 Credits SOPROBRO Required privilege...

WordPress Awesome Fitness Testimonials Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Awesome Fitness Testimonials Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51806 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6dc5acf46761 Credits SOPROBRO Required privilege...

WordPress I Plant A Tree Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

Software I Plant A Tree Type Plugin Vulnerable versions = 1.7.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51883 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 73334290309f Credits SOPROBRO Required privilege Contributor...

WordPress Shortcode Collection Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Shortcode Collection Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51864 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a79b02ce6496 Credits SOPROBRO Required privilege Contribut...

WordPress EventPress Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software EventPress Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51861 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f2952d5f238c Credits SOPROBRO Required privilege Contributor...

WordPress Olympus Shortcodes Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Olympus Shortcodes Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51857 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aec746b4a78a Credits SOPROBRO Required privilege Contribut...

WordPress Social button Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Social button Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51866 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3298adb5e8ae Credits SOPROBRO Required privilege Contributor...

WordPress OSM – OpenStreetMap Plugin <= 6.1.2 is vulnerable to Cross Site Scripting (XSS)

Software OSM – OpenStreetMap Type Plugin Vulnerable versions = 6.1.2 Fixed in 6.1.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52355 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 68bca5f9bb55 Credits Junwoo Kang Required privilege...

WordPress Brand my Footer Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Brand my Footer Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51801 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2b661efe3aa8 Credits SOPROBRO Required privilege Contributor...

WordPress Parallaxer Plugin <= 1.00 is vulnerable to Cross Site Scripting (XSS)

Software Parallaxer Type Plugin Vulnerable versions = 1.00 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51848 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 53fcc9a60f71 Credits SOPROBRO Required privilege Contributor...

WordPress Multi-day Booking Calendar Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Multi-day Booking Calendar Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51873 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1e4344dc5b6c Credits SOPROBRO Required privilege...

WordPress Registrations for the Events Calendar Plugin < 2.12.4 is vulnerable to Cross Site Scripting (XSS)

Software Registrations for the Events Calendar Type Plugin Vulnerable versions 2.12.4 Fixed in 2.12.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7982 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 576ddc99ad72...