CVE-2024-47302

CVE-2024-47302 refers to a Missing Authorization/ Broken Access Control vulnerability in WordPress Fluent Support plugin by WPManageNinja. Affected versions are Fluent Support

CVE-2024-38794 WordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Custom Query Blocks: from n/a through 5.2.0...

CVE-2024-38794

CVE-2024-38794: WordPress Custom Query Blocks plugin (

CVE-2024-43296 WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerability

Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flash & HTML5 Video: from n/a through 2.5.30...

CVE-2024-43956 WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability

Missing Authorization vulnerability in Caseproof, LLC Memberpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Memberpress: from n/a through 1.11.34...

CVE-2024-49290

Cross-Site Request Forgery CSRF vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0...

CVE-2024-49290 WordPress Cooked Pro plugin < 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0...

CVE-2024-49290 WordPress Cooked Pro plugin < 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0...

CVE-2024-49290

CVE-2024-49290 pertains to a Cross-Site Request Forgery (CSRF) in Cooked Pro (WordPress plugin by Gora Tech LLC) affecting versions prior to 1.8.0. The linked sources note that the vulnerability is addressed in version 1.8.0 and advise upgrading to mitigate exposure. No exploit specifics are prov...

CVE-2024-49289

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gora Tech LLC Cooked Pro allows Stored XSS.This issue affects Cooked Pro: from n/a before 1.8.0...

CVE-2024-49289

CVE-2024-49289 (Cooked Pro) : A stored XSS vulnerability exists in Cooked Pro plugin for WordPress prior to version 1.8.0, arising from improper input neutralization during web page generation. The issue affects Cooked Pro pre-1.8.0 and has been assigned CVE-2024-49289. Public disclosures in mult...

CVE-2024-49291

Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0...

CVE-2024-47304

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjahan Jewel Fluent Support fluent-support allows SQL Injection.This issue affects Fluent Support: from n/a through = 1.8.0...

CVE-2024-47304 WordPress Fluent Support plugin <= 1.8.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjahan Jewel Fluent Support fluent-support allows SQL Injection.This issue affects Fluent Support: from n/a through = 1.8.0...

CVE-2024-47304

Fluent Support (WordPress plugin)

CVE-2024-49291 WordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0...

CVE-2024-49291 WordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0...

CVE-2024-49291

CVE-2024-49291 is an unauthenticated, high-severity (CVSS 3.1: 10.0, CRITICAL) vulnerability in the WordPress plugin Cooked Pro prior to version 1.8.0 that allows unrestricted upload of files with dangerous types. The issue affects Cooked Pro up to v1.7.x; upstream sources confirm a fixed release...

PT-2024-32515 · Wpmanageninja Llc · Fluent Support

Name of the Vulnerable Software and Affected Versions: WPManageNinja LLC Fluent Support versions 1.8.0 and earlier Description: The issue is related to an SQL Injection vulnerability, which allows attackers to manipulate SQL commands. This poses a serious cybersecurity risk. Recommendations: For...

CVE-2024-47372

CVE-2024-47372 : Stored XSS in the TNC PDF viewer (ThemeNcode) due to improper input neutralization during web page generation. Affected: TNC PDF viewer versions ≤ 3.1.0. Impact per Patchstack CVE data: low severity (CVSS 5.9) with potential stored cross-site scripting. Mitigation: update to vers...