WordPress Emoji Shortcode Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Emoji Shortcode Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51609 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6ec03d2b4a66 Credits SOPROBRO Required privilege Contributor...

WordPress Simple Job Manager Plugin <= 1.1 is vulnerable to SQL Injection

Software Simple Job Manager Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51602 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a7e27e792959 Credits LVT-tholv2k Required privilege Contributor Publish...

WordPress Elementary Addons Plugin <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Elementary Addons Type Plugin Vulnerable versions = 2.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51586 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d3940bbe2b1c Credits Gab Required privilege Contributor...

WordPress Simple Goods Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Simple Goods Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51574 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 145a6f76509a Credits SOPROBRO Required privilege Contributor...

WordPress WP Hotel Booking Plugin <= 2.1.4 is vulnerable to Local File Inclusion

Software WP Hotel Booking Type Plugin Vulnerable versions = 2.1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-51582 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 5c0a345b0a12 Credits ghsinfosec Required privilege Contributor...

WordPress Bonway Static Block Editor Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Bonway Static Block Editor Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50549 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ca2cd09f42a7 Credits SOPROBRO Required privilege...

WordPress Lodgix.com Vacation Rental Website Builder Plugin <= 3.9.73 is vulnerable to SQL Injection

Software Lodgix.com Vacation Rental Website Builder Type Plugin Vulnerable versions = 3.9.73 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50539 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID c031fbb0d00d Credits LVT-tholv2k Required...

WordPress RLM Elementor Widgets Pack Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Software RLM Elementor Widgets Pack Type Plugin Vulnerable versions = 1.3.1 Fixed in 1.4.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50542 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 13798bc26100 Credits Gab Required privilege...

WordPress Woocommerce Quote Calculator Plugin <= 1.1 is vulnerable to SQL Injection

Software Woocommerce Quote Calculator Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51626 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 1089f04d009b Credits LVT-tholv2k Required privilege Contribut...

WordPress AtomChat Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)

Software AtomChat Type Plugin Vulnerable versions = 1.1.5 Fixed in 1.1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10232 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 646d1a105951 Credits Peter Thaleikis Required...

WordPress amazing neo icon font for elementor Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software amazing neo icon font for elementor Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50543 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 973c64009b42 Credits Gab Required privile...

WordPress Get Quote For Woocommerce Plugin <= 1.0.0 is vulnerable to Broken Access Control

Software Get Quote For Woocommerce Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9430 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ed4687422c20 Credits stehled Required...

WordPress Woo Manage Fraud Orders Plugin <= 6.1.7 is vulnerable to Sensitive Data Exposure

Software Woo Manage Fraud Orders Type Plugin Vulnerable versions = 6.1.7 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-10544 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 66ee55b75466 Credits Colin Xu Required...

WordPress Step by Step Plugin <= 0.4.5 is vulnerable to Cross Site Scripting (XSS)

Software Step by Step Type Plugin Vulnerable versions = 0.4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50535 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e27be9b81170 Credits SOPROBRO Required privilege Contributor...

WordPress WeChat Subscribers Lite Plugin <= 1.6.6 is vulnerable to Cross Site Scripting (XSS)

Software WeChat Subscribers Lite Type Plugin Vulnerable versions = 1.6.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50522 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6111364515e3 Credits Muhamad Agil Fachrian...

WordPress ID-SK Toolkit Plugin <= 1.7.2 is vulnerable to Cross Site Scripting (XSS)

Software ID-SK Toolkit Type Plugin Vulnerable versions = 1.7.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50517 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8f37480f4086 Credits Gab Required privilege Contributor Publish...

WordPress Administrator Z Plugin <= 2024.11.20 is vulnerable to SQL Injection

Software Administrator Z Type Plugin Vulnerable versions = 2024.11.20 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50524 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 23203529cd48 Credits stealthcopter Required privilege Subscriber...

WordPress Pricer Ninja Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Pricer Ninja Type Plugin Vulnerable versions = 2.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50518 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 057e1d4e73d1 Credits SOPROBRO Required privilege Contributor...

WordPress Download Manager Plugin < 3.3.00 is vulnerable to Cross Site Scripting (XSS)

Software Download Manager Type Plugin Vulnerable versions 3.3.00 Fixed in 3.3.00 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8444 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 72a55938734a Credits Miguel Xavier Penha Net...

WordPress affiliate-toolkit Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)

Software affiliate-toolkit Type Plugin Vulnerable versions = 3.6.5 Fixed in 3.6.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10227 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 78a335fc5aaa Credits Peter Thaleikis...