CVE-2024-38754

CVE-2024-38754 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Taggbox Taggbox (Tagbox Widget), affecting Taggbox versions up to 3.3. The issued CVE notes a CSRF flaw without detailing exploitation steps or specific affected actions beyond the CSRF label. The C...

WordPress Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Taggbox versions = 3.2...