WordPress SiteOrigin Widgets Bundle plugin <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting in Image Grid widget vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin SiteOrigin Widgets Bundle versions = 1.62.2...

CVE-2024-42156

creationtimestamp| type| source ---|---|--- 2024-07-30 10:43:34+00:00| seen| https://t.me/cvedetector/2015 2025-05-20 14:40:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16987 2025-12-03 14:14:49+00:00| seen|...

CVE-2024-42160

creationtimestamp| type| source ---|---|--- 2024-07-30 10:43:28+00:00| seen| https://t.me/cvedetector/2011 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2024-41109: Exposure of Sensitive Information to an Unauthorized Actor

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to /admin/index/statistics with a logged in Pimcore user exposes information about the Pimcore installation, PHP version, MYSQL version, installed bundles and all database tables and their row count in the...

PT-2024-37235 · WordPress · Siteorigin Widgets Bundle

Name of the Vulnerable Software and Affected Versions: SiteOrigin Widgets Bundle plugin for WordPress versions up to, and including, 1.62.2 Description: The issue is related to Stored Cross-Site Scripting via the Image Grid widget due to insufficient input sanitization and output escaping on...

CVE-2024-5901: Improper Neutralization of Input During Web Page Generation

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget in all versions up to, and including, 1.62.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress plugin SiteOrigin Widgets Bundle 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress SiteOrigin Widgets Bundle Plugin <= 1.62.2 is vulnerable to Cross Site Scripting (XSS)

Software SiteOrigin Widgets Bundle Type Plugin Vulnerable versions = 1.62.2 Fixed in 1.62.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5901 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ee6a602a0665 Credits Ngô Thiên An...

CVE-2024-42068

creationtimestamp| type| source ---|---|--- 2024-07-29 18:48:43+00:00| seen| https://t.me/cvedetector/1887 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2024-42063

creationtimestamp| type| source ---|---|--- 2024-07-29 18:48:40+00:00| published-proof-of-concept| https://t.me/cvedetector/1884 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2024-42079

creationtimestamp| type| source ---|---|--- 2024-07-29 18:48:28+00:00| seen| https://t.me/cvedetector/1876 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-07-28 16:15:30+00:00| seen|...

CVE-2024-42080

creationtimestamp| type| source ---|---|--- 2024-07-29 18:48:24+00:00| seen| https://t.me/cvedetector/1872 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2024-41073

creationtimestamp| type| source ---|---|--- 2024-07-29 17:58:09+00:00| seen| https://t.me/cvedetector/1864 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-05-07 14:35:10+00:00| seen|...

CVE-2024-41080

creationtimestamp| type| source ---|---|--- 2024-07-29 17:58:07+00:00| seen| https://t.me/cvedetector/1862 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

WordPress Email Encoder Bundle Plugin < 2.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Email Encoder Bundle Type Plugin Vulnerable versions 2.2.2 Fixed in 2.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4483 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5d3ad3645d3e Credits Krugov Artyom Require...

CVE-2024-38473

creationtimestamp| type| source ---|---|--- 2024-07-17 12:43:59+00:00| seen| https://vulnerability.circl.lu/bundle/a23cbcad-e890-4df8-8736-9332ed4c3d47 2024-08-23 04:51:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8332 2024-08-23 14:04:28+00:00| published-proof-of-concept|...

CVE-2024-38477

creationtimestamp| type| source ---|---|--- 2024-07-17 12:43:59+00:00| seen| https://vulnerability.circl.lu/bundle/a23cbcad-e890-4df8-8736-9332ed4c3d47 2024-10-05 20:59:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8689 2024-10-06 03:39:45+00:00| published-proof-of-concept|...

CVE-2022-48852

creationtimestamp| type| source ---|---|--- 2024-07-16 16:16:58+00:00| seen| https://t.me/cvedetector/958 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2022-48863

creationtimestamp| type| source ---|---|--- 2024-07-16 16:16:51+00:00| seen| https://t.me/cvedetector/954 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2022-48865

creationtimestamp| type| source ---|---|--- 2024-07-16 16:16:50+00:00| seen| https://t.me/cvedetector/953 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...