WordPress Brand my Footer Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Brand my Footer Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51801 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2b661efe3aa8 Credits SOPROBRO Required privilege Contributor...

WordPress Fancy User List Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Software Fancy User List Type Plugin Vulnerable versions = 3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51889 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 31e7eea63edb Credits SOPROBRO Required privilege Contributor...

WordPress Parallaxer Plugin <= 1.00 is vulnerable to Cross Site Scripting (XSS)

Software Parallaxer Type Plugin Vulnerable versions = 1.00 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51848 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 53fcc9a60f71 Credits SOPROBRO Required privilege Contributor...

WordPress VP Sitemap Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software VP Sitemap Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51922 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b0df95bf7481 Credits SOPROBRO Required privilege Contributor Publish...

WordPress OS Pricing Tables Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software OS Pricing Tables Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52343 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c73f13923f0c Credits SOPROBRO Required privilege Contributor...

WordPress Awesome Tool Tip Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Awesome Tool Tip Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52349 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f7d3a34cf862 Credits SOPROBRO Required privilege Contributor...

WordPress scrollup Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software scrollup Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51921 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 16031e982e42 Credits SOPROBRO Required privilege Contributor Published...

WordPress Shortcode Collection Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Shortcode Collection Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51864 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a79b02ce6496 Credits SOPROBRO Required privilege Contribut...

WordPress Multi-day Booking Calendar Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Multi-day Booking Calendar Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51873 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1e4344dc5b6c Credits SOPROBRO Required privilege...

WordPress Booking Calendar Plugin < 10.6.3 is vulnerable to Cross Site Scripting (XSS)

Software Booking Calendar Type Plugin Vulnerable versions 10.6.3 Fixed in 10.6.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10027 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 999b4bfc809b Credits Dmitrii Ignatyev...

WordPress plugin WP ULike 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress Super Socializer Plugin <= 7.13.68 is vulnerable to Broken Authentication

Software Super Socializer Type Plugin Vulnerable versions = 7.13.68 Fixed in 7.14 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9946 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 3feff8ece72e Credits wesle...

WordPress Contact Form 7 Dynamic Text Extension Plugin <= 4.5 is vulnerable to Sensitive Data Exposure

Software Contact Form 7 Dynamic Text Extension Type Plugin Vulnerable versions = 4.5 Fixed in 4.5.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-10084 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4a8f9f7ebcd8 Credits...

WordPress WS Form LITE Plugin <= 1.9.244 is vulnerable to Cross Site Scripting (XSS)

Software WS Form LITE Type Plugin Vulnerable versions = 1.9.244 Fixed in 1.9.245 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10647 Patch priority Medium CVSS severity Medium 7.1 Developer WS Form PSID fff125dfb47d Credits Peter Thaleikis Required...

WordPress Pods Plugin < 3.2.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Pods Type Plugin Vulnerable versions 3.2.7.1 Fixed in 3.2.7.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9883 Patch priority Low CVSS severity Low 5.9 Developer Pods Framework PSID 8da137c3c337 Credits Dmitrii Ignatyev Required privileg...

WordPress JobSearch Plugin <= 2.6.7 is vulnerable to Arbitrary File Upload

Software JobSearch Type Plugin Vulnerable versions = 2.6.7 Fixed in 2.6.8 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-8614 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID d16b486be3a5 Credits Tonn Required privilege Subscriber Published 5...

WordPress mFolio Lite Plugin <= 1.2.1 is vulnerable to Broken Access Control

Software mFolio Lite Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9307 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 19ba5b646cd3 Credits Francesco Carlucci Required...

WordPress Everest Backup Plugin <= 2.2.13 is vulnerable to Sensitive Data Exposure

Software Everest Backup Type Plugin Vulnerable versions = 2.2.13 Fixed in 2.2.14 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-10028 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID a89321fb2bfd Credits floerer Required privile...

Exploit for CVE-2024-53615

CVE-2024-53615 A command injection vulnerability in the video...

WordPress WooCommerce Social Login Plugin <= 2.7.7 is vulnerable to Broken Authentication

Software WooCommerce Social Login Type Plugin Vulnerable versions = 2.7.7 Fixed in 2.7.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-10114 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 36095483e627 Credi...