WordPress Weekly Class Schedule Plugin <= 3.19 is vulnerable to Cross Site Scripting (XSS)

Software Weekly Class Schedule Type Plugin Vulnerable versions = 3.19 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31084 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9a05f9bc5077 Credits Dimas Maulana Required...

WordPress Header Image Slider Plugin <= 0.3 is vulnerable to Cross Site Scripting (XSS)

Software Header Image Slider Type Plugin Vulnerable versions = 0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30547 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 96f5b84d4f33 Credits Dimas Maulana Required privilege...

WordPress Christmas Greetings Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)

Software Christmas Greetings Type Plugin Vulnerable versions = 1.2.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2116 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 410abc2ecae6 Credits Lucio Sá Require...

WordPress New Order Notification for Woocommerce Plugin <= 2.0.2 is vulnerable to Broken Access Control

Software New Order Notification for Woocommerce Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31098 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f43459ca9b98 Credits...

WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.7 is vulnerable to Broken Access Control

Software Shortcodes and extra features for Phlox theme Type Plugin Vulnerable versions = 2.15.7 Fixed in 2.15.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31099 Patch priority Medium CVSS severity Medium 6.4 Developer Claim ownership PSID 6820fd10e35f...

WordPress Comic Easel Plugin <= 1.15 is vulnerable to Cross Site Scripting (XSS)

Software Comic Easel Type Plugin Vulnerable versions = 1.15 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31092 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1ef1de760870 Credits Dimas Maulana Required privilege...

WordPress Sticky Anything Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Sticky Anything Type Plugin Vulnerable versions = 2.1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30551 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 25bb0e7db645 Credits Mika Required privilege...

WordPress Contact Form 7 Newsletter Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form 7 Newsletter Type Plugin Vulnerable versions = 2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31110 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d60fc2231b4d Credits Dimas Maulana Required...

WordPress SP Project & Document Manager Plugin <= 4.70 is vulnerable to Broken Access Control

Software SP Project & Document Manager Type Plugin Vulnerable versions = 4.70 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31118 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d4072053f9aa Credits CatFather...

WordPress SEO Title Tag Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS)

Software SEO Title Tag Type Plugin Vulnerable versions = 3.5.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31097 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7390e13eda59 Credits Dimas Maulana Required privilege...

WordPress Woocommerce Social Media Share Buttons Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Woocommerce Social Media Share Buttons Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31109 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2941fe56e84a Credits Dimas Maula...

WordPress User Rights Access Manager Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)

Software User Rights Access Manager Type Plugin Vulnerable versions = 1.1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31122 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 0673dec6d13c Credits Yudistira Arya Required...

WordPress Lightbox slider – Responsive Lightbox Gallery Plugin <= 1.9.9 is vulnerable to PHP Object Injection

Software Lightbox slider – Responsive Lightbox Gallery Type Plugin Vulnerable versions = 1.9.9 Fixed in 1.10.0 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-1858 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID c570605cfccd Credits...

WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Image Gallery, Gallery Album Type Plugin Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30550 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 40ddad95b8d8 Credits LVT-tholv2...

WordPress Yoo Slider Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Yoo Slider Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31106 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7632355b4c8e Credits Dimas Maulana Required privilege...

WordPress AdsPlace'r – Ad Manager, Inserter, AdSense Ads Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)

Software AdsPlace'r – Ad Manager, Inserter, AdSense Ads Type Plugin Vulnerable versions = 1.1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31088 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID f29b9c4efc4a Credits Dim...

WordPress Post-Plugin Library Plugin <= 2.6.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Post-Plugin Library Type Plugin Vulnerable versions = 2.6.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31085 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c8fe5a2f8b83 Credits Dimas Maulana Required...

WordPress pageMash > Page Management Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software pageMash Page Management Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31087 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 77d83c9f1a3c Credits Dimas Maulana Required...

WordPress Hacklog Down As PDF Plugin <= 2.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Hacklog Down As PDF Type Plugin Vulnerable versions = 2.3.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31090 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 688ae2dee281 Credits Dimas Maulana Required privile...

WordPress Meta Tag Manager Plugin <= 3.0.2 is vulnerable to PHP Object Injection

Software Meta Tag Manager Type Plugin Vulnerable versions = 3.0.2 Fixed in 3.1 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-1770 Patch priority Medium CVSS severity Medium 8.5 Developer Claim ownership PSID e36fbb9c63ac Credits Francesco Carlucci Required privilege...