WordPress DS Site Message Plugin <= 1.14.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software DS Site Message Type Plugin Vulnerable versions = 1.14.4 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-34439 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ed0d196473d6 Credits umi Required privilege...

WordPress Content Blocks (Custom Post Widget) Plugin <= 3.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Content Blocks Custom Post Widget Type Plugin Vulnerable versions = 3.3.0 Fixed in 3.3.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34566 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c437cf336c56 Credits Ngô Thiên An ancorn...

WordPress Gold Addons for Elementor Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)

Software Gold Addons for Elementor Type Plugin Vulnerable versions = 1.2.9 Fixed in 1.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34563 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4ec8bc999d21 Credits Khalid Yusuf Required...

WordPress WidgetKit Plugin <= 2.4.8 is vulnerable to Cross Site Scripting (XSS)

Software WidgetKit Type Plugin Vulnerable versions = 2.4.8 Fixed in 2.5.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34548 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d04ccca624d0 Credits Ray Wilson Required privilege Contributor...

WordPress Shared Files Plugin <= 1.7.19 is vulnerable to Broken Access Control

Software Shared Files Type Plugin Vulnerable versions = 1.7.19 Fixed in 1.7.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34438 Patch priority Low CVSS severity Low 5.3 Developer Tammersoft PSID 04ad9b91bcca Credits domiee13 Required privilege...

WordPress Magical Addons For Elementor Plugin <= 1.1.34 is vulnerable to Cross Site Scripting (XSS)

Software Magical Addons For Elementor Type Plugin Vulnerable versions = 1.1.34 Fixed in 1.1.35 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34547 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 74ccb66566e9 Credits Khalid Yusuf Required...

WordPress Shared Counts Plugin <= 1.4.1 is vulnerable to Broken Access Control

Software Shared Counts Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.5.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9dd902d0b809 Credits N/A Required privilege Unauthenticated...

WordPress Ghost Plugin <= 1.4.0 is vulnerable to Sensitive Data Exposure

Software Ghost Type Plugin Vulnerable versions = 1.4.0 Fixed in 1.5.0 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-34559 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 149041968d48 Credits Joshua Chan Requir...

WordPress Brozzme Scroll Top plugin <= 1.8.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Cronus Patchstack Alliance in WordPress Plugin Brozzme Scroll Top versions = 1.8.5...

WordPress Hostel Plugin <= 1.1.5.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Hostel Type Plugin Vulnerable versions = 1.1.5.3 Fixed in 1.1.5.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-4314 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5c8220b39532 Credits Benedictus Jovan aillesiM...

WordPress Brozzme Scroll Top Plugin <= 1.8.5 is vulnerable to Cross Site Scripting (XSS)

Software Brozzme Scroll Top Type Plugin Vulnerable versions = 1.8.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34426 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 40ba77316890 Credits Cronus Required privilege Administrat...

WordPress Post Grid Master Plugin <= 3.4.12 is vulnerable to Cross Site Scripting (XSS)

Software Post Grid Master Type Plugin Vulnerable versions = 3.4.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34390 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6ac8a85df075 Credits Yudistira Arya Required privilege...

WordPress raindrops Theme <= 1.600 is vulnerable to Cross Site Scripting (XSS)

Software raindrops Type Theme Vulnerable versions = 1.600 Fixed in 1.700 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34414 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d4e3ff80bd8c Credits stealthcopter Required privilege Contributor...

WordPress Auto Affiliate Links Plugin <= 6.4.3.1 is vulnerable to SQL Injection

Software Auto Affiliate Links Type Plugin Vulnerable versions = 6.4.3.1 Fixed in 6.4.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-34386 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 901e8da7d177 Credits Do Truong Giang Required privilege Editor...

WordPress TT Custom Post Type Creator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software TT Custom Post Type Creator Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34430 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0c53513c230b Credits alfido osdie Patchstack Allian...

WordPress QuickieBar Plugin <=1.8.4 is vulnerable to Cross Site Scripting (XSS)

Software QuickieBar Type Plugin Vulnerable versions =1.8.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34425 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b83e4c9fe703 Credits Sharanabasappa Required privilege Administrato...

WordPress Featured Content Gallery Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Featured Content Gallery Type Plugin Vulnerable versions = 3.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34424 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID dd932076ad8b Credits Sharanabasappa Required privile...

WordPress ClickCease Click Fraud Protection Plugin <= 3.2.4 is vulnerable to Sensitive Data Exposure

Software ClickCease Click Fraud Protection Type Plugin Vulnerable versions = 3.2.4 Fixed in 3.2.5 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-6810 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3a24e46ebbd4 Credits Francesc...

WordPress Pk Favicon Manager Plugin <=2.1 is vulnerable to Arbitrary File Upload

Software Pk Favicon Manager Type Plugin Vulnerable versions =2.1 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Arbitrary File Upload CVE CVE-2024-34416 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 4605b4908c9e Credits Roby Firnando Yusuf Required privileg...

WordPress WP Favorite Posts Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Favorite Posts Type Plugin Vulnerable versions = 1.6.8 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34427 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d53b91365ef2 Credits Huynh Tien Si...