WordPress chatplusjp Plugin <= 1.02 is vulnerable to Cross Site Scripting (XSS)

Software chatplusjp Type Plugin Vulnerable versions = 1.02 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49664 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 46efe375be7e Credits Mika Required privilege Unauthenticated...

WordPress WooCommerce Maintenance Mode Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Maintenance Mode Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49651 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2eff34a69714 Credits Mika Required privile...

WordPress Code Generate Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Code Generate Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49646 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9f72ba821343 Credits Mika Required privilege Unauthenticate...

WordPress Extra Privacy for Elementor Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Extra Privacy for Elementor Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49654 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a3a2af9d08c Credits Mika Required privileg...

WordPress SVG Captcha Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software SVG Captcha Type Plugin Vulnerable versions = 1.0.11 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49648 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4de2045288d3 Credits Mika Required privilege Unauthenticat...

WordPress Whitelist Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)

Software Whitelist Type Plugin Vulnerable versions = 3.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49643 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3e96a305df4e Credits Mika Required privilege Unauthenticated...

WordPress Monitor.chat Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Monitor.chat Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49639 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c019b6d72e6e Credits Mika Required privilege Unauthenticat...

WordPress Agile Video Player Lite Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Agile Video Player Lite Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49636 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 267bc8c567b6 Credits João Pedro S Alcântara Kinor...

WordPress Tida URL Screenshot Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Tida URL Screenshot Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49641 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 97c4a19331ca Credits Mika Required privilege...

WordPress Edit WooCommerce Templates Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Edit WooCommerce Templates Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10049 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b4d2a710a7c6 Credits Colin Xu...

WordPress Social Share With Floating Bar Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Social Share With Floating Bar Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8790 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2ad955a877b0 Credits vgo0...

WordPress Property Lot Management System Plugin <= 4.2.38 is vulnerable to Arbitrary File Upload

Software Property Lot Management System Type Plugin Vulnerable versions = 4.2.38 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49331 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 5524e01a8194 Credits CTRL Chance Required...

DEBIAN-CVE-2024-9958

Inappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-9961

Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-9956

Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-9963

Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-9963

Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-9958

Inappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-9958

Inappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-9956

CVE-2024-9956 affects Google Chrome on Android prior to 130.0.6723.58, with an Inappropriate implementation in WebAuthentication allowing a local attacker to escalate privileges via a crafted HTML page. The CVE’s standard metrics show LOCAL attack vector, LOW attack complexity, NONE privileges re...