PT-2024-32552 · Wpexperts · Wpexperts Square For Givewp

Name of the Vulnerable Software and Affected Versions: WPExperts Square For GiveWP versions 1.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

WordPress WPExperts Square For GiveWP Plugin <= 1.3 is vulnerable to SQL Injection

Software WPExperts Square For GiveWP Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-47338 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 5f874d4bcf27 Credits Jorge Diaz ddiax Required privilege...

WordPress Post SMTP Plugin <= 2.9.3 is vulnerable to SQL Injection

Software Post SMTP Type Plugin Vulnerable versions = 2.9.3 Fixed in 2.9.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-5207 Patch priority Low CVSS severity Low 7.6 Developer WPExperts PSID ff0923d41368 Credits Le Ngoc Anh Required privilege Administrator Published 30 May,...

CVE-2024-31297

Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0...

CVE-2024-31297

CVE-2024-31297 affects Wholesale For WooCommerce (WooCommerce Wholesale Pricing) up to v2.3.0. A Missing Authorization vulnerability allows unauthenticated users to perform Unauthenticated Arbitrary Post Deletion, enabling data loss via unauthorized post deletions. The incident is associated with...

CVE-2024-30469

Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0...

CVE-2024-30469

Technical details for CVE-2024-30469 are not publicly available in the provided documents. Monitor for official updates and vendor advisories for affected products and remediation steps.

WordPress Post SMTP Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)

Software Post SMTP Type Plugin Vulnerable versions = 2.8.6 Fixed in 2.8.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29128 Patch priority Medium CVSS severity Medium 7.1 Developer WPExperts PSID d4415453cdb3 Credits Le Ngoc Anh Required privilege Unauthenticat...

Exploit for Missing Authorization in Wpexperts Post_Smtp

CVE-2023-6875 Exploit for PostSMTP - Unauthorized Account...

WordPress Post SMTP Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)

Software Post SMTP Type Plugin Vulnerable versions = 2.8.6 Fixed in 2.8.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6629 Patch priority Medium CVSS severity Medium 7.1 Developer WPExperts PSID 5ffadd1b9885 Credits Matan Berson matanber Required...

WordPress Post SMTP Plugin <= 2.8.7 is vulnerable to Cross Site Scripting (XSS)

Software Post SMTP Type Plugin Vulnerable versions = 2.8.7 Fixed in 2.8.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-7027 Patch priority Medium CVSS severity Medium 7.1 Developer WPExperts PSID 7142ca21bf69 Credits Sean Murphy Required privilege...

WordPress Post SMTP Plugin < 2.5.8 is vulnerable to Cross Site Scripting (XSS)

Software Post SMTP Type Plugin Vulnerable versions 2.5.8 Fixed in 2.5.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer WPExperts PSID d7157e1c149c Credits Rafie Muhammad Patchstack Required privilege...

WordPress Post SMTP Plugin <= 2.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Post SMTP Type Plugin Vulnerable versions = 2.5.7 Fixed in 2.5.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3082 Patch priority Low CVSS severity Low 7.1 Developer WPExperts PSID c8d98d03e5dd Credits Alex Thomas Required privilege...

CVE-2023-32580

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPExperts Password Protected plugin = 2.6.2 versions...

CVE-2023-32580

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPExperts Password Protected plugin = 2.6.2 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPExperts Password Protected plugin = 2.6.2 versions...

CVE-2023-32580

CVE-2023-32580 affects the WordPress plugin “Password Protected” (WPExperts) ≤ 2.6.2. The issue is an authenticated (admin+) Stored Cross‑Site Scripting (XSS) vulnerability, enabling script injection via the plugin’s handling of input when already logged in as an administrator. Multiple sources c...

CVE-2023-32580 WordPress Password Protected Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPExperts Password Protected plugin = 2.6.2 versions...