WordPress Visual Portfolio, Photo Gallery & Post Grid Plugin <= 3.3.2 is vulnerable to Cross Site Scripting (XSS)

Software Visual Portfolio, Photo Gallery & Post Grid Type Plugin Vulnerable versions = 3.3.2 Fixed in 3.3.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4363 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f5a76513a112...

WordPress Borderless Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Borderless Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4666 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d9fe795f805d Credits stealthcopter Required...

WordPress Copymatic – AI Content Writer & Generator Plugin <= 1.6 is vulnerable to Arbitrary File Upload

Software Copymatic – AI Content Writer & Generator Type Plugin Vulnerable versions = 1.6 Fixed in 1.7 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-31351 Patch priority High CVSS severity High 10 Developer Claim ownership PSID aae3946a50f0 Credits Francois Harvey...

WordPress Radio Player Plugin <= 2.0.73 is vulnerable to Broken Access Control

Software Radio Player Type Plugin Vulnerable versions = 2.0.73 Fixed in 2.0.74 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34753 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 77522de0f9f2 Credits Steven Julian Required privile...

WordPress Graphina Plugin <= 1.8.9 is vulnerable to Cross Site Scripting (XSS)

Software Graphina Type Plugin Vulnerable versions = 1.8.9 Fixed in 1.8.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4574 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 937e343a9f16 Credits stealthcopter Required privile...

WordPress Ketos Theme <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ketos Type Theme Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34810 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e63a68a26b27 Credits Dhabaleshwar Das Required...

WordPress Starter Templates Plugin <= 4.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Starter Templates Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4630 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 24edcd535038 Credits wesley wcraft Required...

WordPress Zeka Theme <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Zeka Type Theme Vulnerable versions = 1.0.9 Fixed in 1.0.10 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34810 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6e9edbf3a6c1 Credits Dhabaleshwar Das Required...

WordPress Niveau Theme <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Niveau Type Theme Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34810 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID afd0e5cb471f Credits Dhabaleshwar Das Required...

WordPress Mindscape Theme <= 1.0.16 is vulnerable to Cross Site Request Forgery (CSRF)

Software Mindscape Type Theme Vulnerable versions = 1.0.16 Fixed in 1.0.23 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34810 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c591d53d9f92 Credits Dhabaleshwar Das Require...

WordPress Falang multilanguage Plugin <= 1.3.49 is vulnerable to Cross Site Scripting (XSS)

Software Falang multilanguage Type Plugin Vulnerable versions = 1.3.49 Fixed in 1.3.50 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4417 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f66544b43c9b Credits Benedictus Jovan...

WordPress LearnPress Plugin <= 4.2.6.5 is vulnerable to Cross Site Scripting (XSS)

Software LearnPress Type Plugin Vulnerable versions = 4.2.6.5 Fixed in 4.2.6.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4277 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3ad5ee25dcd1 Credits stealthcopter Required...

WordPress Giveaways and Contests by RafflePress Plugin <= 1.12.4 is vulnerable to Broken Access Control

Software Giveaways and Contests by RafflePress Type Plugin Vulnerable versions = 1.12.4 Fixed in 1.12.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4745 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 632d49d4c2a4 Credits...

WordPress WP Discourse Plugin <= 2.5.1 is vulnerable to Broken Access Control

Software WP Discourse Type Plugin Vulnerable versions = 2.5.1 Fixed in 2.5.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35168 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4c4620868728 Credits Joshua Chan Required privilege...

WordPress ShortPixel Adaptive Images Plugin <= 3.8.3 is vulnerable to Server Side Request Forgery (SSRF)

Software ShortPixel Adaptive Images Type Plugin Vulnerable versions = 3.8.3 Fixed in 3.8.4 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-35172 Patch priority Low CVSS severity Low 4.4 Developer ShortPixel PSID 719a27565a33 Credits...

WordPress iPages Flipbook Plugin <= 1.5.1 is vulnerable to Broken Access Control

Software iPages Flipbook Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4744 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID bb5d1d1247cb Credits Dhabaleshwar Das Required...

WordPress Pods Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Pods Type Plugin Vulnerable versions = 3.2.1 Fixed in 3.2.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3956 Patch priority Low CVSS severity Low 6.5 Developer Pods Framework PSID dfdffac18c6b Credits wesley wcraft Required privilege...

WordPress Extra Theme <= 4.25.0 is vulnerable to Cross Site Scripting (XSS)

Software Extra Type Theme Vulnerable versions = 4.25.0 Fixed in 4.25.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4490 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bcfad4f5bb49 Credits Webbernaut Required privilege...

WordPress Flo Forms Plugin <= 1.0.42 is vulnerable to Broken Access Control

Software Flo Forms Type Plugin Vulnerable versions = 1.0.42 Fixed in 1.0.43 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35174 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5341640d4e58 Credits Dhabaleshwar Das Required privile...

WordPress EmbedPress Plugin <= 3.9.16 is vulnerable to Cross Site Scripting (XSS)

Software EmbedPress Type Plugin Vulnerable versions = 3.9.16 Fixed in 3.9.17 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4316 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 866c57fd8830 Credits stealthcopter Required...