4787 matches found
WordPress Crypto and DeFi Widgets Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)
Software Crypto and DeFi Widgets Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11365 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5b571d52ad59 Credits vgo0 Requir...
WordPress Activity Log Plugin <= 2.11.1 is vulnerable to Cross Site Scripting (XSS)
Software Activity Log Type Plugin Vulnerable versions = 2.11.1 Fixed in 2.11.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10788 Patch priority Medium CVSS severity Medium 7.1 Developer Elementor PSID 657fbb862f42 Credits mikemyers Required...
WordPress Ashe Theme <= 2.243 is vulnerable to Cross Site Scripting (XSS)
Software Ashe Type Theme Vulnerable versions = 2.243 Fixed in 2.244 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9777 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1ba0e6cd8ae8 Credits vgo0 Required privilege...
WordPress Bard Theme <= 2.216 is vulnerable to Cross Site Scripting (XSS)
Software Bard Type Theme Vulnerable versions = 2.216 Fixed in 2.217 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9830 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 43a6b249026a Credits vgo0 Required privilege...
WordPress Youneeq Recommendations Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)
Software Youneeq Recommendations Type Plugin Vulnerable versions = 3.0.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52457 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8204a0f3cdb4 Credits João Pedro S Alcântara...
WordPress TM Islamic Helper Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
Software TM Islamic Helper Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52458 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fd0fe53c5a0c Credits João Pedro S Alcântara Kinorth...
WordPress Explara Events Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)
Software Explara Events Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52466 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cb44f6bfc562 Credits Mika Required privilege...
WordPress QRMenu Restaurant QR Menu Lite Plugin <= 1.0.3 is vulnerable to PHP Object Injection
Software QRMenu Restaurant QR Menu Lite Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52445 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID faf2a3afc906 Credits LVT-tholv2k Required...
WordPress GoQSmile Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
Software GoQSmile Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52455 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dbb042e2576e Credits Mika Required privilege Unauthenticated...
WordPress WordPress GDPR & CCPA Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
Software WordPress GDPR & CCPA Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10388 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 255755def3df Credits István Márt...
WordPress Awesome Studio Plugin <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)
Software Awesome Studio Type Plugin Vulnerable versions = 2.4.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52456 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 83cb8daf8eb9 Credits Le Ngoc Anh Required privilege...
WordPress Library Bookshelves Plugin <= 5.8 is vulnerable to Cross Site Scripting (XSS)
Software Library Bookshelves Type Plugin Vulnerable versions = 5.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52453 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 893d1f48a420 Credits Mika Required privilege...
WordPress WordPress GDPR & CCPA Plugin <= 2.0.2 is vulnerable to Broken Access Control
Software WordPress GDPR & CCPA Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-11069 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b71de0a7a1a1 Credits István Márton...
WordPress Extensions for Elementor Plugin <= 2.0.40 is vulnerable to Cross Site Scripting (XSS)
Software Extensions for Elementor Type Plugin Vulnerable versions = 2.0.40 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52471 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 37895dfd43f1 Credits Le Ngoc Anh Required...
WordPress GoQMieruca Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software GoQMieruca Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52454 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b8173d189fba Credits Mika Required privilege Unauthenticated...
WordPress Event Tickets with Ticket Scanner Plugin <= 2.3.11 is vulnerable to Remote Code Execution (RCE)
Software Event Tickets with Ticket Scanner Type Plugin Vulnerable versions = 2.3.11 Fixed in 2.3.12 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-52427 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 3ef418855694 Credits Hakiduck...
Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2024-757)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-757 advisory. There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted...
WordPress Gameplan Theme <= 1.5.10 is vulnerable to Cross Site Scripting (XSS)
Software Gameplan Type Theme Vulnerable versions = 1.5.10 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52418 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7409a8ffcf90 Credits justakazh Required privilege...
WordPress Convert Docx2post Plugin <= 1.4 is vulnerable to Arbitrary File Upload
Software Convert Docx2post Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52397 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID 9d8423b2e894 Credits CTRL Chance Required privilege Author...
