INE Security Launches New Training Solutions to Enhance Cyber Hygiene for SMBs

Cary, NC, 22nd October 2024, CyberNewsWire...

WordPress WooCommerce Order Proposal Plugin <= 2.0.5 is vulnerable to Broken Authentication

Software WooCommerce Order Proposal Type Plugin Vulnerable versions = 2.0.5 Fixed in 2.0.6 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9927 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID d873b6f7fa89 Credit...

WordPress WooCommerce Maintenance Mode Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Maintenance Mode Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49651 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2eff34a69714 Credits Mika Required privile...

WordPress DocumentPress Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software DocumentPress Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49656 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9ccb703f5e18 Credits Mika Required privilege Unauthenticate...

WordPress BP Member Type Manager Plugin <= 1.01 is vulnerable to Cross Site Scripting (XSS)

Software BP Member Type Manager Type Plugin Vulnerable versions = 1.01 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49634 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ae38971a18f4 Credits João Pedro S Alcântara Kinor...

WordPress chatplusjp Plugin <= 1.02 is vulnerable to Cross Site Scripting (XSS)

Software chatplusjp Type Plugin Vulnerable versions = 1.02 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49664 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 46efe375be7e Credits Mika Required privilege Unauthenticated...

WordPress Affiliate Platform Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)

Software Affiliate Platform Type Plugin Vulnerable versions = 1.4.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49645 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e63013ed9d44 Credits Mika Required privilege...

WordPress Agile Video Player Lite Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Agile Video Player Lite Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49636 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 267bc8c567b6 Credits João Pedro S Alcântara Kinor...

WordPress Code Generate Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Code Generate Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49646 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9f72ba821343 Credits Mika Required privilege Unauthenticate...

WordPress Monitor.chat Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Monitor.chat Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49639 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c019b6d72e6e Credits Mika Required privilege Unauthenticat...

WordPress SVG Captcha Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software SVG Captcha Type Plugin Vulnerable versions = 1.0.11 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49648 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4de2045288d3 Credits Mika Required privilege Unauthenticat...

WordPress WP-Members Plugin <= 3.4.9.5 is vulnerable to Cross Site Scripting (XSS)

Software WP-Members Type Plugin Vulnerable versions = 3.4.9.5 Fixed in 3.4.9.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9231 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0e4e11a3431f Credits vgo0 Required...

WordPress Whitelist Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)

Software Whitelist Type Plugin Vulnerable versions = 3.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49643 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3e96a305df4e Credits Mika Required privilege Unauthenticated...

WordPress Extra Privacy for Elementor Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Extra Privacy for Elementor Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49654 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a3a2af9d08c Credits Mika Required privileg...

WordPress CWD 3D Image Gallery Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software CWD 3D Image Gallery Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49632 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ff9d4857fb07 Credits João Pedro S Alcântara Kinorth...

WordPress BuddyPress Greeting Message Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software BuddyPress Greeting Message Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49650 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c4cc6687bfca Credits Mika Required privileg...

WordPress leenk.me Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)

Software leenk.me Type Plugin Vulnerable versions = 2.16.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49661 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9fc14cabc7ca Credits João Pedro S Alcântara Kinorth Required...

WordPress INK Official Plugin <= 4.1.2 is vulnerable to Arbitrary File Upload

Software INK Official Type Plugin Vulnerable versions = 4.1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49669 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 67e983d6f9c5 Credits ghsinfosec Required privilege Contributo...

WordPress Risk Warning Bar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Risk Warning Bar Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49638 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 36cfba44579b Credits Mika Required privilege...

WordPress Tida URL Screenshot Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Tida URL Screenshot Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49641 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 97c4a19331ca Credits Mika Required privilege...