11783 matches found
CVE-2023-31229
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in WP Directory Kit.This issue affects WP Directory Kit: from n/a through 1.1.9...
CVE-2023-51486
Cross-Site Request Forgery CSRF vulnerability in RedNao WooCommerce PDF Invoice Builder.This issue affects WooCommerce PDF Invoice Builder: from n/a through 1.2.101...
CVE-2023-25468
Cross-Site Request Forgery CSRF vulnerability in Reservation.Studio Reservation.Studio widget plugin = 1.0.11 versions...
CVE-2023-52175
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Uno miunosoft Auto Amazon Links – Amazon Associates Affiliate Plugin allows Stored XSS.This issue affects Auto Amazon Links – Amazon Associates Affiliate Plugin: from n/a through 5.1.1...
CVE-2023-7069
The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advancediframe' shortcode in all versions up to, and including, 2023.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2023-34179
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Inc. Groundhogg allows SQL Injection.This issue affects Groundhogg: from n/a through 2.7.11...
CVE-2023-34171
Cross-Site Request Forgery CSRF vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...
CVE-2023-34177
Cross-Site Request Forgery CSRF vulnerability in Kenth Hagström WP-Cache.Com plugin = 1.1.1 versions...
CVE-2023-34182
Cross-Site Request Forgery CSRF vulnerability in Peter Shaw LH Password Changer plugin = 1.55 versions...
CVE-2023-34004
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WooCommerce WooCommerce Box Office plugin = 1.1.50 versions...
CVE-2023-30872
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BannerSky BSK Forms Blacklist.This issue affects BSK Forms Blacklist: from n/a through 3.6.2...
CVE-2023-30474
Cross-Site Request Forgery CSRF vulnerability in Kilian Evang Ultimate Noindex Nofollow Tool II plugin = 1.3 versions...
CVE-2023-52145
Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Republish Old Posts.This issue affects Republish Old Posts: from n/a through 1.21...
CVE-2023-30754
Unauth. Reflected Cross-Site Scripting XSS vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt plugin = 1.8.5 versions...
CVE-2023-30484
Cross-Site Request Forgery CSRF vulnerability in uPress Enable Accessibility plugin = 1.4 versions...
CVE-2023-30747
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPGem WooCommerce Easy Duplicate Product plugin = 0.3.0.0 versions...
CVE-2023-38478
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and QuickBooks.This issue affects Integration for WooCommerce and QuickBooks: from n/a through 1.2.3...
CVE-2023-47243
Cross-Site Request Forgery CSRF vulnerability in CodeMShop 코드엠샵 마이사이트 – MSHOP MY SITE.This issue affects 코드엠샵 마이사이트 – MSHOP MY SITE: from n/a through 1.1.6...