Lucene search
+L

7914 matches found

Vulnrichment
Vulnrichment
added 2024/06/09 12:16 p.m.15 views

CVE-2024-32821 WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in TotalSuite Total Poll Lite.This issue affects Total Poll Lite: from n/a through 4.9.9...

4.3CVSS4.7AI score0.00373EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/09 12:16 p.m.37 views

CVE-2024-32821 WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in TotalSuite Total Poll Lite.This issue affects Total Poll Lite: from n/a through 4.9.9...

4.3CVSS0.00373EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/09 11:15 a.m.8 views

CVE-2024-30485

Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0...

8.8CVSS7.3AI score0.01038EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/09 11:15 a.m.35 views

CVE-2024-30485

Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0...

8.8CVSS0.01038EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/09 11:15 a.m.44 views

CVE-2024-25092

Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0...

8.8CVSS0.01376EPSS
SaveExploits3References1
OSV
OSV
added 2024/06/09 11:15 a.m.11 views

CVE-2024-25092

Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0...

8.8CVSS7.3AI score0.01376EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
added 2024/06/09 10:58 a.m.16 views

CVE-2024-30485 WordPress Finale Lite plugin <= 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability

Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0...

8.8CVSS6.9AI score0.01038EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/06/09 10:58 a.m.40 views

CVE-2024-30485 WordPress Finale Lite plugin <= 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability

Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0...

8.8CVSS0.01038EPSS
SaveExploits1References1
CVE
CVE
added 2024/06/09 10:58 a.m.87 views

CVE-2024-30485

CVE-2024-30485 corresponds to a Missing Authorization vulnerability in the WordPress plugin Finale Lite. The record notes affected versions “through 2.18.0” and indicates a proof-of-concept/exploitation path exists that can allow an attacker to install and activate arbitrary plugins, as seen in c...

8.8CVSS8.8AI score0.01038EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/06/09 10:28 a.m.55 views

CVE-2024-25092 WordPress NextMove Lite plugin <= 2.17.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability

Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0...

8.8CVSS0.01376EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
added 2024/06/09 10:28 a.m.19 views

CVE-2024-25092 WordPress NextMove Lite plugin <= 2.17.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability

Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0...

8.8CVSS8.7AI score0.01376EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
added 2024/06/09 12:00 a.m.14 views

PT-2024-23411 · Xlplugins · Xlplugins Finale Lite

Name of the Vulnerable Software and Affected Versions: XLPlugins Finale Lite versions through 2.18.0 Description: The issue is related to a Missing Authorization vulnerability in XLPlugins Finale Lite. This could potentially compromise data due to the lack of proper authorization checks...

8.8CVSS9.3AI score0.01038EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/06/09 12:00 a.m.8 views

WordPress plugin Total Poll Lite security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.7AI score0.00373EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/09 12:00 a.m.14 views

WordPress plugin NextMove Lite security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.7AI score0.01376EPSS
SaveExploits3References3
CNNVD
CNNVD
added 2024/06/09 12:00 a.m.9 views

WordPress plugin Finale Lite security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS6.7AI score0.01038EPSS
SaveExploits1References2
NVD
NVD
added 2024/06/08 2:15 p.m.29 views

CVE-2024-35709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through = 5.5.4...

6.5CVSS0.00262EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/08 2:15 p.m.10 views

CVE-2024-35709

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.5.4...

5.4CVSS5.8AI score0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/08 2:03 p.m.69 views

CVE-2024-35709

CVE-2024-35709 is a Stored XSS vulnerability in WordPress The Plus Addons for Elementor Page Builder Lite (versions up to and including 5.5.4). The issue stems from improper input neutralization during web page generation, enabling stored XSS. Affected product: The Plus Addons for Elementor Page ...

6.5CVSS5.9AI score0.00262EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/08 2:03 p.m.22 views

CVE-2024-35709 WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.5.4...

6.5CVSS6.8AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/08 2:03 p.m.45 views

CVE-2024-35709 WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through = 5.5.4...

6.5CVSS0.00262EPSS
SaveExploits0References1
Rows per page
Query Builder