WordPress AWSM Team Plugin <= 1.3.1 is vulnerable to Local File Inclusion

Software AWSM Team Type Plugin Vulnerable versions = 1.3.1 Fixed in 1.3.2 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-37454 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a8caf37850ed Credits João Pedro S Alcântara Kinorth...

WordPress Blocksy Theme <= 2.0.22 is vulnerable to Cross Site Request Forgery (CSRF)

Software Blocksy Type Theme Vulnerable versions = 2.0.22 Fixed in 2.0.23 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37469 Patch priority Low CVSS severity Low 5.4 Developer Creative Themes PSID a4b7cfca4dc7 Credits RE-ALTER Required privileg...

WordPress GPT3 AI Content Writer Plugin <= 1.8.66 is vulnerable to Cross Site Scripting (XSS)

Software GPT3 AI Content Writer Type Plugin Vulnerable versions = 1.8.66 Fixed in 1.8.67 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37465 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1398a1f33d9c Credits LVT-tholv2k Required privileg...

WordPress Ultimate Bootstrap Elements for Elementor Plugin <= 1.4.2 is vulnerable to Local File Inclusion

Software Ultimate Bootstrap Elements for Elementor Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-37462 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a8f9d8a5eba6 Credits João...

WordPress Ashe Theme <= 2.233 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ashe Type Theme Vulnerable versions = 2.233 Fixed in 2.234 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37478 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 01c115634ea3 Credits Dhabaleshwar Das Required...

WordPress Schema Lite Theme <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Schema Lite Type Theme Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37452 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID eb6f533c9390 Credits Dhabaleshwar Das Required...

WordPress Travel Agency Theme <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Travel Agency Type Theme Vulnerable versions = 1.4.9 Fixed in 1.5.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37451 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3d26a472da99 Credits Dhabaleshwar Das...

OESA-2024-1755 aspell security update

GNU Aspell is a spell checker intended to replace Ispell. It can be used as a library and spell checker. Its main feature is that it provides much better suggestions than other inspectors, including Ispell and Microsoft Word. It also has many other technical enhancements to Ispell, such as the us...

WordPress Slider Revolution Plugin <= 6.7.13 is vulnerable to Cross Site Scripting (XSS)

Software Slider Revolution Type Plugin Vulnerable versions = 6.7.13 Fixed in 6.7.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37449 Patch priority Low CVSS severity Low 5.9 Developer ThemePunch PSID 0c45389d2eaa Credits wcraft Required privilege Administrator...

WordPress PowerPack Lite for Beaver Builder Plugin <= 1.3.0.3 is vulnerable to Local File Inclusion

Software PowerPack Lite for Beaver Builder Type Plugin Vulnerable versions = 1.3.0.3 Fixed in 1.3.0.4 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-37410 Patch priority Low CVSS severity Low 4.9 Developer IdeaBox Creations PSID 6c1f186fa5b1 Credits João...

WordPress Benevolent Theme <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Benevolent Type Theme Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37450 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cd5e8d04c7ca Credits Dhabaleshwar Das Required...

WordPress Chained Quiz Plugin <= 1.3.2.8 is vulnerable to Cross Site Scripting (XSS)

Software Chained Quiz Type Plugin Vulnerable versions = 1.3.2.8 Fixed in 1.3.2.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37446 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 534f1e281848 Credits Manab Jyoti Dowarah Required privileg...

WordPress ARMember Premium Plugin < 6.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software ARMember Premium Type Plugin Vulnerable versions 6.7.1 Fixed in 6.7.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47424 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b77f7fcbe1ab Credits Cat Required privile...

WordPress Silesia Theme <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Silesia Type Theme Vulnerable versions = 1.0.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5788 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0a70857ded97 Credits Francesco Carlucci Required privile...

WordPress Conversios.io Plugin <= 7.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Conversios.io Type Plugin Vulnerable versions = 7.1.0 Fixed in 7.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6288 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ca27caeedd00 Credits Ulyses Saicha Requir...

WordPress Featured Image from URL Plugin <= 4.8.1 is vulnerable to Broken Access Control

Software Featured Image from URL Type Plugin Vulnerable versions = 4.8.1 Fixed in 4.8.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37276 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cc8f54a6d149 Credits Rafie Muhammad...

WordPress Uncanny Toolkit Pro for LearnDash Plugin < 4.1.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Uncanny Toolkit Pro for LearnDash Type Plugin Vulnerable versions 4.1.4.1 Fixed in 4.1.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37436 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 95db5389fd59 Credits Dave Jong...

WordPress Easy Image Collage Plugin <= 1.13.5 is vulnerable to Broken Access Control

Software Easy Image Collage Type Plugin Vulnerable versions = 1.13.5 Fixed in 1.13.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5863 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 9f1bcb932e47 Credits Lucio Sá Required privile...

WordPress e2pdf Plugin <= 1.20.27 is vulnerable to Broken Access Control

Software e2pdf Type Plugin Vulnerable versions = 1.20.27 Fixed in 1.23.00 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37415 Patch priority Low CVSS severity Low 5.4 Developer E2Pdf.com PSID 4dae4c7543a5 Credits Steven Julian Required privilege Subscrib...

WordPress Theron Lite Theme <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Theron Lite Type Theme Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5925 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b5cd651aaada Credits Francesco Carlucci Required...