12292 matches found
WordPress Community by PeepSo Plugin <= 6.4.6.2 is vulnerable to Cross Site Scripting (XSS)
Software Community by PeepSo Type Plugin Vulnerable versions = 6.4.6.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11447 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9789945f6fbd Credits rajanhoyr...
WordPress WPFunnels Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)
Software WPFunnels Type Plugin Vulnerable versions = 3.5.5 Fixed in 3.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10792 Patch priority Medium CVSS severity Medium 7.1 Developer WPFunnels Team PSID b1c17399226b Credits Nathan calysteon Require...
WordPress MailMunch – Grow your Email List Plugin <= 3.1.8 is vulnerable to Cross Site Scripting (XSS)
Software MailMunch – Grow your Email List Type Plugin Vulnerable versions = 3.1.8 Fixed in 3.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8735 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5f0fbbdecd42 Credits...
WordPress WordPress Announcement & Notification Banner Plugin – Bulletin Plugin <= 3.11.7 is vulnerable to Cross Site Scripting (XSS)
Software WordPress Announcement & Notification Banner Plugin – Bulletin Type Plugin Vulnerable versions = 3.11.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10682 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownersh...
WordPress affiliate-toolkit Plugin <= 3.6.7 is vulnerable to Cross Site Scripting (XSS)
Software affiliate-toolkit Type Plugin Vulnerable versions = 3.6.7 Fixed in 3.6.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10675 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 897413b9ba8a Credits Peter Thaleikis...
WordPress Run Contests, Raffles, and Giveaways with ContestsWP Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Run Contests, Raffles, and Giveaways with ContestsWP Type Plugin Vulnerable versions = 2.0.3 Fixed in 2.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11456 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...
WordPress Friendly Functions for Welcart Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
Software Friendly Functions for Welcart Type Plugin Vulnerable versions = 1.2.4 Fixed in 1.2.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10726 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b139992aab4f Credits vg...
WordPress Button Block Plugin <= 1.1.4 is vulnerable to Broken Authentication
Software Button Block Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-10671 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID ae07da220d1c Credits...
WordPress ForumEngine Theme <= 1.8 is vulnerable to Cross Site Scripting (XSS)
Software ForumEngine Type Theme Vulnerable versions = 1.8 Fixed in 1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10623 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4119169dab6d Credits rajanhoyr Required privile...
WordPress System Dashboard Plugin < 2.8.15 is vulnerable to Cross Site Scripting (XSS)
Software System Dashboard Type Plugin Vulnerable versions 2.8.15 Fixed in 2.8.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11107 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 948953d35f1c Credits Dogus Demirkiran...
WordPress Block Editor Bootstrap Blocks Plugin <= 6.6.1 is vulnerable to Cross Site Scripting (XSS)
Software Block Editor Bootstrap Blocks Type Plugin Vulnerable versions = 6.6.1 Fixed in 6.6.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-11402 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0635cf898925 Credits Le Ngoc Anh Requir...
WordPress Crypto and DeFi Widgets Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)
Software Crypto and DeFi Widgets Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11365 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5b571d52ad59 Credits vgo0 Requir...
WordPress Activity Log Plugin <= 2.11.1 is vulnerable to Cross Site Scripting (XSS)
Software Activity Log Type Plugin Vulnerable versions = 2.11.1 Fixed in 2.11.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10788 Patch priority Medium CVSS severity Medium 7.1 Developer Elementor PSID 657fbb862f42 Credits mikemyers Required...
WordPress WIP Incoming Lite Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
Software WIP Incoming Lite Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11416 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d449e884123c Credits SOPROBRO Requir...
WordPress Lock User Account Plugin <= 1.0.5 is vulnerable to Broken Authentication
Software Lock User Account Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-11197 Patch priority Low CVSS severity Low 4.2 Developer Claim ownership PSID 83b2ce1638c9 Credits Francesc...
WordPress WP Project Manager Plugin <= 2.6.14 is vulnerable to Broken Access Control
Software WP Project Manager Type Plugin Vulnerable versions = 2.6.14 Fixed in 2.6.15 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10520 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 33198b86bceb Credits Noah Stead...
WordPress Grid View Gallery Plugin <= 1.0 is vulnerable to PHP Object Injection
Software Grid View Gallery Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-11409 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID ccd9bf1d982e Credits Francesco Carlucci Required privilege...
WordPress Subaccounts for WooCommerce Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)
Software Subaccounts for WooCommerce Type Plugin Vulnerable versions = 1.6.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11370 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e68bad5342df Credits vgo0...
WordPress Page Parts Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)
Software Page Parts Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11360 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6c5273fd367a Credits vgo0 Required privileg...
