WordPress Ajax Content Filter Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Ajax Content Filter Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51717 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7cb6e9b7a362 Credits thiennv Required privilege...

WordPress PropertyShift Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software PropertyShift Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51762 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID eb3e1e85e252 Credits Mika Required privilege...

WordPress Narnoo Commerce Manager Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

Software Narnoo Commerce Manager Type Plugin Vulnerable versions = 1.6.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51708 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1daa09058da0 Credits João Pedro S Alcântara...

PT-2024-31835 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3900 version 1.5.1.3 Description: The issue is a post-authentication command injection problem. It occurs when the action parameter in the "cgi-bin/mainfunction.cgi" endpoint is set to setSWMGroup. This allows for potential comma...

WordPress Conversion Helper Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)

Software Conversion Helper Type Plugin Vulnerable versions = 1.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-10676 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 008d9a851e15 Credits João Pedro S Alcântara Kinorth...

WordPress FriendStore for WooCommerce Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Software FriendStore for WooCommerce Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51784 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3c501c831fbd Credits João Pedro S Alcântara...

WordPress Twitter @Anywhere Plus Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Twitter @Anywhere Plus Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51659 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 45e136ae6e17 Credits SOPROBRO Require...

WordPress BetterLinks Plugin <= 2.1.7 is vulnerable to SQL Injection

Software BetterLinks Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51672 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 159a4550c364 Credits Marek Mikita Required privilege Administrator Publish...

WordPress WP Course Manager Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Course Manager Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51658 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID fb5da93f1648 Credits SOPROBRO Required...

WordPress W3P SEO Plugin < 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software W3P SEO Type Plugin Vulnerable versions 1.8.6 Fixed in 1.8.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51684 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 58f497ee049b Credits SOPROBRO Required privilege...

WordPress Sticky Social Bar Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Sticky Social Bar Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51631 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 1d738a190c0e Credits SOPROBRO Required...

WordPress ThemeFuse Maintenance Mode Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software ThemeFuse Maintenance Mode Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51645 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 3f380fad532f Credits SOPROBRO...

WordPress While Loading Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software While Loading Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51635 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 43e4880a5344 Credits SOPROBRO Required privile...

WordPress plugin Backup and Restore WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-8002 · Lb Link · Lb-Link Bl-Wr 1300H

Name of the Vulnerable Software and Affected Versions: LB-LINK BL-WR 1300H version 1.0.4 Description: The issue is related to hardcoded credentials stored in the /etc/shadow file of the LB-LINK BL-WR 1300H router. These credentials are easily guessable, which could allow a remote attacker to gain...

WordPress Advanced PDF Generator Plugin <= 0.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Advanced PDF Generator Type Plugin Vulnerable versions = 0.4.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51641 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 34e686e1f7cd Credits SOPROBRO...

WordPress HT Builder – WordPress Theme Builder for Elementor Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software HT Builder – WordPress Theme Builder for Elementor Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51682 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0f85ba0467c8 Credits Gab...

PT-2024-30479 · Woocommerce · Wpc Frequently Bought Together

Name of the Vulnerable Software and Affected Versions: WPC Frequently Bought Together for WooCommerce versions prior to 7.1.9 Description: The issue affects the WPC Frequently Bought Together for WooCommerce plugin due to a Missing Authorization vulnerability. This vulnerability allows for the...

WordPress Seo Free Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Seo Free Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51642 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 3ad2526b4888 Credits SOPROBRO Required privilege...

WordPress Random Featured Post Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Random Featured Post Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51650 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 985c582f06c5 Credits SOPROBRO Require...