CVE-2024-8326 s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 241114 via the 'scgetdetails' function. This makes it possible for...

CVE-2024-8326

CVE-2024-8326 affects s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions (WordPress). The issue is Sensitive Information Exposure via the sc_get_details function in all versions up to 241114; authenticated users with Contributor+ access c...

CVE-2024-9624

The WP All Import Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.9.3 due to missing SSRF protection on the pmxicurldownload function. This makes it possible for authenticated attackers, with Administrator-level access and above, to ma...

CVE-2024-11905

The Animated Counters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'animatedcounte' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-11902

The Slope Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slope-reservations' shortcode in all versions up to, and including, 4.2.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-11900

The Portfolio – Filterable Masonry Portfolio Gallery for Professionals plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'portfolio-pro' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user suppli...

CVE-2024-11906 TPG Get Posts <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

The TPG Get Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpggetposts' shortcode in all versions up to, and including, 3.6.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-11906

CVE-2024-11906 affects the WordPress plugin “TPG Get Posts.” It enables Stored Cross-Site Scripting via the plugin’s tpg_get_posts shortcode in all versions up to 3.6.5 due to insufficient input sanitization and output escaping of user-supplied attributes. Exploitation requires at least contribut...

CVE-2024-11905

CVE-2024-11905 – The Animated Counters plugin for WordPress is vulnerable to a Stored XSS via the plugin’s 'animatedcounte' shortcode in all versions up to 2.0 due to insufficient input sanitization and output escaping on user-supplied attributes. This requires an attacker with at least Contribut...

CVE-2024-11905 Animated Counters <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Animated Counters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'animatedcounte' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-11902 Slope Widgets <= 4.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Slope Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slope-reservations' shortcode in all versions up to, and including, 4.2.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-11902

CVE-2024-11902 affects the Slope Widgets WordPress plugin. The issue is a Stored Cross-Site Scripting vulnerability via the plugin’s slope-reservations shortcode, present in all versions up to 4.2.11, caused by insufficient input sanitization and output escaping of user-supplied attributes. Conse...

CVE-2024-12443

The CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'crm-perks-tickets' shortcode in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping on...

CVE-2024-55451

A Stored Cross-Site Scripting XSS vulnerability exists in authenticated SVG file upload and viewing functionality in UJCMS 9.6.3. The vulnerability arises from insufficient sanitization of embedded attributes in uploaded SVG files. When a maliciously crafted SVG file is viewed by other backend...

CVE-2024-55452

A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items. This vulnerability allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated...

CVE-2024-12443

CVE-2024-12443 affects the CRM Perks – WordPress HelpDesk Integration plugin for WordPress. It is a Stored XSS vulnerability in the crm-perks-tickets shortcode present in all versions up to 1.1.6, caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitat...

CVE-2024-55451

A Stored Cross-Site Scripting (XSS) vulnerability exists in the authenticated SVG file upload and viewing functionality of UJCMS version 9.6.3 . The root cause is the insufficient sanitization of embedded attributes within uploaded SVG files. A malicious actor can upload a crafted SVG file which,...

CVE-2024-55452

A URL redirection vulnerability exists in UJCMS version 9.6.3 due to improper validation of URLs during the upload and rendering of new block/carousel items . This flaw allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. If a user clicks on ...

CVE-2024-37774

A Cross-Site Request Forgery CSRF in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens...

CVE-2024-37774

A Cross-Site Request Forgery (CSRF) vulnerability exists in Sunbird DCIM dcTrack v9.1.2 . This flaw allows authenticated attackers to escalate privileges by forcing an Administrator user to perform sensitive requests within certain administrative screens. To mitigate this risk, it is recommended ...