12293 matches found
WordPress MG Post Contributors Plugin <= 1.3. is vulnerable to Cross Site Scripting (XSS)
Software MG Post Contributors Type Plugin Vulnerable versions = 1.3. Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51701 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 80baf1e54702 Credits João Pedro S Alcântara Kinorth...
WordPress Conversion Helper Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)
Software Conversion Helper Type Plugin Vulnerable versions = 1.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-10676 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 008d9a851e15 Credits João Pedro S Alcântara Kinorth...
WordPress Saragna Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Saragna Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51711 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 521f5ad254b7 Credits João Pedro S Alcântara Kinorth Required...
WordPress Daily Image Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Daily Image Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51776 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ce43f45355b0 Credits João Pedro S Alcântara Kinorth Required...
WordPress Jigoshop – Store Toolkit Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)
Software Jigoshop – Store Toolkit Type Plugin Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51712 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 84e860833836 Credits Zlrqh Required privilege...
WordPress User Password Reset Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software User Password Reset Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51714 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 916db7652ed6 Credits SOPROBRO Required privilege...
WordPress Twitter real time search scrolling Plugin <= 7.0 is vulnerable to Cross Site Scripting (XSS)
Software Twitter real time search scrolling Type Plugin Vulnerable versions = 7.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51716 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5ded87af36a1 Credits SOPROBRO Required...
WordPress WP-Basics Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Software WP-Basics Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51703 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 01450775b356 Credits João Pedro S Alcântara Kinorth Required...
WordPress Loginplus Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
Software Loginplus Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51782 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3789effcd64f Credits Mika Required privilege Unauthenticated...
WordPress Forms: 3rd-Party Post Again Plugin <= 0.3 is vulnerable to Cross Site Scripting (XSS)
Software Forms: 3rd-Party Post Again Type Plugin Vulnerable versions = 0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51783 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0af0ceb02a42 Credits João Pedro S Alcântara...
WordPress WPHelpful Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
Software WPHelpful Type Plugin Vulnerable versions = 1.2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51761 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 740c174aa3ba Credits Mika Required privilege Unauthenticated...
WordPress Simple Modal Plugin <= 0.3.3 is vulnerable to Cross Site Scripting (XSS)
Software Simple Modal Type Plugin Vulnerable versions = 0.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51718 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 97fa1290c928 Credits João Pedro S Alcântara Kinorth Requir...
WordPress Narnoo Commerce Manager Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)
Software Narnoo Commerce Manager Type Plugin Vulnerable versions = 1.6.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51708 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1daa09058da0 Credits João Pedro S Alcântara...
WordPress Dashing Memberships Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
Software Dashing Memberships Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51760 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 753de7df4cde Credits Mika Required privilege...
WordPress eewee admin custom Plugin <= 1.8.2.4 is vulnerable to Cross Site Scripting (XSS)
Software eewee admin custom Type Plugin Vulnerable versions = 1.8.2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51780 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4886c0ef8c81 Credits João Pedro S Alcântara Kinort...
WordPress Bing Search API Integration Plugin <= 0.3.3 is vulnerable to Cross Site Scripting (XSS)
Software Bing Search API Integration Type Plugin Vulnerable versions = 0.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51692 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 61326e410f4b Credits João Pedro S Alcântara...
WordPress Search order by product SKU for WooCommerce Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)
Software Search order by product SKU for WooCommerce Type Plugin Vulnerable versions = 0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51693 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 613fdf38f761 Credits thiennv...
WordPress Admin Amplify Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
Software Admin Amplify Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51691 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6902915ddda2 Credits João Pedro S Alcântara Kinorth...
WordPress Doofinder Plugin <= 0.5.4 is vulnerable to Cross Site Scripting (XSS)
Software Doofinder Type Plugin Vulnerable versions = 0.5.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51697 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c0891a6b2f0a Credits João Pedro S Alcântara Kinorth Required...
WordPress TeleAdmin Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software TeleAdmin Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51709 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID aab8543c213f Credits SOPROBRO Required privilege...