CVE-2024-43326

Missing Authorization vulnerability in Jamie Bergen Plugin Notes Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Plugin Notes Plus: from n/a through 1.2.7...

CVE-2024-43326

CVE-2024-43326 affects Plugin Notes Plus for WordPress (Jamie Bergen). It is a Missing Authorization vulnerability that allows accessing functionality not properly constrained by ACLs, enabling (at least) arbitrary note deletion in Notes Plus

CVE-2024-43326 WordPress Plugin Notes Plus plugin <= 1.2.7 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Jamie Bergen Plugin Notes Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Plugin Notes Plus: from n/a through 1.2.7...

CVE-2024-37561 WordPress Plugin Notes Plus plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jamie Bergen Plugin Notes Plus allows Stored XSS.This issue affects Plugin Notes Plus: from n/a through 1.2.6...

CVE-2024-37561

CVE-2024-37561 is a Stored XSS in WordPress Plugin Notes Plus (Jamie Bergen). Affected: Plugin Notes Plus from n/a through 1.2.6. Root cause: Improper Neutralization of Input During Web Page Generation. CVSS 3.1 metrics: AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L with base score 5.9. Public references p...