WordPress Clever Fox Plugin <= 25.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Clever Fox Type Plugin Vulnerable versions = 25.2.0 Fixed in 25.2.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1768 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 78a218f7f787 Credits WordFence Required privileg...

WordPress Formula Theme <= 0.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Formula Type Theme Vulnerable versions = 0.5.1 Fixed in 0.5.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5613 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 97aaf68b1698 Credits blackmoon Required privileg...

WordPress Salon booking system Plugin <= 9.9 is vulnerable to Broken Access Control

Software Salon booking system Type Plugin Vulnerable versions = 9.9 Fixed in 10.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-4468 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 495ce87718e9 Credits JoanClarke2 Required privile...

WordPress WP Reset Plugin <= 2.01 is vulnerable to Broken Access Control

Software WP Reset Type Plugin Vulnerable versions = 2.01 Fixed in 2.03 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-4661 Patch priority Low CVSS severity Low 4.3 Developer WebFactory Ltd. PSID 7f5481b63727 Credits Foxyyy Required privilege Subscriber...

WordPress GDPR CCPA Compliance Support Plugin <= 2.7.0 is vulnerable to Cross Site Scripting (XSS)

Software GDPR CCPA Compliance Support Type Plugin Vulnerable versions = 2.7.0 Fixed in 2.7.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5607 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 298f3a902d63 Credits Lucio...

WordPress Cards for Beaver Builder Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Cards for Beaver Builder Type Plugin Vulnerable versions = 1.1.3 Fixed in 1.1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5663 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 64782496eb36 Credits Francesco...

WordPress Tooltip CK Plugin <=2.2.15 is vulnerable to Cross Site Scripting (XSS)

Software Tooltip CK Type Plugin Vulnerable versions =2.2.15 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35756 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 12799be490e9 Credits Cronus Required privilege Administrator...

WordPress Market Exporter Plugin <= 2.0.19 is vulnerable to Arbitrary File Deletion

Software Market Exporter Type Plugin Vulnerable versions = 2.0.19 Fixed in 2.0.20 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-5637 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID c9e019d8b649 Credits Lucio Sá Required...

WordPress Bosa Elementor Addons and Templates for WooCommerce Plugin <= 1.0.12 is vulnerable to Broken Access Control

Software Bosa Elementor Addons and Templates for WooCommerce Type Plugin Vulnerable versions = 1.0.12 Fixed in 1.0.13 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35724 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1047c66e2d47...

WordPress SC filechecker Plugin <= 0.6 is vulnerable to Arbitrary File Deletion

Software SC filechecker Type Plugin Vulnerable versions = 0.6 Fixed in N/A OWASP Top 10 A6: Security Misconfiguration Classification Arbitrary File Deletion CVE CVE-2024-35743 Patch priority Low CVSS severity Low 8.6 Developer Claim ownership PSID 308e99f1ec04 Credits YCInfosec Required privilege...

WordPress Rotating Tweets Plugin <= 1.9.10 is vulnerable to Cross Site Scripting (XSS)

Software Rotating Tweets Type Plugin Vulnerable versions = 1.9.10 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5141 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 44a4d93efa2c Credits Krzysztof Zając Required...

WordPress Simple Image Popup Shortcode Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Image Popup Shortcode Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5342 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5e65083a903a Credits Francesco...

WordPress Sensei Pro (WC Paid Courses) Plugin <= 4.23.1.1.23.1 is vulnerable to Cross Site Scripting (XSS)

Software Sensei Pro WC Paid Courses Type Plugin Vulnerable versions = 4.23.1.1.23.1 Fixed in 4.24.0.1.24.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34765 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID ffa624f39abc Credits Rafie...

WordPress Eduma Theme <= 5.4.7 is vulnerable to Cross Site Scripting (XSS)

Software Eduma Type Theme Vulnerable versions = 5.4.7 Fixed in 5.4.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35697 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2f915e1861e8 Credits Rafie Muhammad Patchstack Required privileg...

WordPress Auto Coupons for WooCommerce Plugin <= 3.0.14 is vulnerable to Cross Site Scripting (XSS)

Software Auto Coupons for WooCommerce Type Plugin Vulnerable versions = 3.0.14 Fixed in 3.0.15 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35733 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1b70ed246f0c Credits Le Ngoc Anh...

WordPress Custom Font Uploader Plugin <= 2.3.4 is vulnerable to Broken Access Control

Software Custom Font Uploader Type Plugin Vulnerable versions = 2.3.4 Fixed in 2.4.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5489 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ec1d5e78e0ec Credits Lucio Sá Required privile...

WordPress Dashboard To-Do List Plugin <= 1.2.0 is vulnerable to Broken Access Control

Software Dashboard To-Do List Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.3.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35723 Patch priority Low CVSS severity Low 4.3 Developer Andrew Rapps PSID e4b3c03fafe1 Credits CatFather Required privileg...

WordPress Widget Options Plugin <= 4.0.1 is vulnerable to Sensitive Data Exposure

Software Widget Options Type Plugin Vulnerable versions = 4.0.1 Fixed in 4.0.2 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-35690 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 47a57087030e Credits Dave Jong Patchstack Require...

WordPress The Post Grid Plugin <= 7.7.1 is vulnerable to Cross Site Scripting (XSS)

Software The Post Grid Type Plugin Vulnerable versions = 7.7.1 Fixed in 7.7.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35739 Patch priority Low CVSS severity Low 6.5 Developer Mamunur Rashid PSID 3801d97a66a9 Credits SouzaZinn Required privilege Contributor...

WordPress Sensei Pro (WC Paid Courses) Plugin <= 4.23.1.1.23.1 is vulnerable to Broken Access Control

Software Sensei Pro WC Paid Courses Type Plugin Vulnerable versions = 4.23.1.1.23.1 Fixed in 4.24.0.1.24.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35686 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5a225c011e38 Credits...