WordPress Otter - Gutenberg Block Plugin <= 3.0.3 is vulnerable to Broken Access Control

Software Otter - Gutenberg Block Type Plugin Vulnerable versions = 3.0.3 Fixed in 3.0.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-51671 Patch priority Low CVSS severity Low 2.7 Developer Claim ownership PSID 1f22a7b87ab8 Credits Rafie Muhammad...

WordPress Blrt WP Embed Plugin <= 1.6.9 is vulnerable to SQL Injection

Software Blrt WP Embed Type Plugin Vulnerable versions = 1.6.9 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51606 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 28047d081653 Credits LVT-tholv2k Required privilege Contributor Published ...

WordPress amazing neo icon font for elementor Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software amazing neo icon font for elementor Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50543 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 973c64009b42 Credits Gab Required privile...

WordPress Smart Mockups Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Smart Mockups Type Plugin Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50537 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7ed20a7339ab Credits SOPROBRO Required privilege Contributor...

WordPress Awesome Progress Bar Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Awesome Progress Bar Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50548 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1d8e4459e1b3 Credits theviper17 Required privilege...

WordPress Quran Shortcode Plugin <= 1.5 is vulnerable to SQL Injection

Software Quran Shortcode Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51625 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID c3f04d230d13 Credits LVT-tholv2k Required privilege Contributor Published ...

WordPress Simple Job Manager Plugin <= 1.1 is vulnerable to SQL Injection

Software Simple Job Manager Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51602 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a7e27e792959 Credits LVT-tholv2k Required privilege Contributor Publish...

WordPress MPG Plugin <= 4.0.1 is vulnerable to Broken Access Control

Software MPG Type Plugin Vulnerable versions = 4.0.1 Fixed in 4.0.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-7424 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 61dc998feee8 Credits Rafshanzani Suhada Required privilege...

WordPress Simple Goods Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Simple Goods Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51574 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 145a6f76509a Credits SOPROBRO Required privilege Contributor...

WordPress Emoji Shortcode Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Emoji Shortcode Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51609 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6ec03d2b4a66 Credits SOPROBRO Required privilege Contributor...

WordPress Easy Gallery Plugin <= 1.4 is vulnerable to SQL Injection

Software Easy Gallery Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51570 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 71bb9789b0d3 Credits LVT-tholv2k Required privilege Contributor Published 31...

WordPress RSVP ME Plugin <= 1.9.9 is vulnerable to SQL Injection

Software RSVP ME Type Plugin Vulnerable versions = 1.9.9 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50544 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 1e22cf9c262a Credits LVT-tholv2k Required privilege Contributor Published 31...

WordPress Classy Addons for Elementor Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)

Software Classy Addons for Elementor Type Plugin Vulnerable versions = 1.2.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50553 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e89f889c481e Credits Gab Required privilege...

WordPress Kento Ads Rotator Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Kento Ads Rotator Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51583 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0d17bd84097b Credits SOPROBRO Required privilege Contributor...

WordPress AtomChat Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)

Software AtomChat Type Plugin Vulnerable versions = 1.1.5 Fixed in 1.1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10232 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 646d1a105951 Credits Peter Thaleikis Required...

WordPress Download-Mirror-Counter Plugin <= 1.1 is vulnerable to SQL Injection

Software Download-Mirror-Counter Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51621 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID b6969fba593d Credits LVT-tholv2k Required privilege Contributor...

WordPress Themedy Toolbox Plugin <= 1.0.16 is vulnerable to Cross Site Scripting (XSS)

Software Themedy Toolbox Type Plugin Vulnerable versions = 1.0.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50547 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 016e04512162 Credits theviper17 Required privilege Contribut...

WordPress Audio Comparison Lite Plugin <= 3.4 is vulnerable to Cross Site Scripting (XSS)

Software Audio Comparison Lite Type Plugin Vulnerable versions = 3.4 Fixed in 3.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51627 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0a5a84c2cb69 Credits SOPROBRO Required privilege...

WordPress bpmn.io Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software bpmn.io Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51577 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9aca1d801a93 Credits SOPROBRO Required privilege Contributor Published ...

LevelOne WBR-6012 Web Application buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-1997 LevelOne WBR-6012 Web Application buffer overflow vulnerability October 30, 2024 CVE Number CVE-2024-28052 SUMMARY The WBR-6012 is a wireless SOHO router. It is a low-cost device which functions as an internet gateway for homes and small offices while...