WordPress Chartify Plugin <= 2.7.6 is vulnerable to Cross Site Scripting (XSS)

Software Chartify Type Plugin Vulnerable versions = 2.7.6 Fixed in 2.7.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47347 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 53b94498a517 Credits Le Ngoc Anh Required privilege...

WordPress WP Mail Catcher Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)

Software WP Mail Catcher Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.1.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47339 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c286bdf972a5 Credits Le Ngoc Anh Required privilege...

CVE-2024-6769 Medium to High Integrity Privilege Escalation in Microsoft Windows

A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integri...

WordPress Store Hours for WooCommerce Plugin <= 4.3.20 is vulnerable to Cross Site Scripting (XSS)

Software Store Hours for WooCommerce Type Plugin Vulnerable versions = 4.3.20 Fixed in 4.3.22 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8872 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 68b70cba0cc7 Credits vgo0...

WordPress nm-visitors Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software nm-visitors Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4541 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 95398650de42 Credits rezaduty Required privileg...

WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 2.15 is vulnerable to Cross Site Scripting (XSS)

Software Bulk NoIndex & NoFollow Toolkit Type Plugin Vulnerable versions = 2.15 Fixed in 2.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8803 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 78a9bff492c8 Credits vgo0...

SUSE CVE-2024-7018

Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: Medium...

SUSE CVE-2024-7019

Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

WordPress WS Form LITE Plugin <= 1.9.238 is vulnerable to Cross Site Scripting (XSS)

Software WS Form LITE Type Plugin Vulnerable versions = 1.9.238 Fixed in 1.9.244 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47320 Patch priority Medium CVSS severity Medium 7.1 Developer WS Form PSID cb1829e55bbc Credits savphill Required privilege...

WordPress Share This Image Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)

Software Share This Image Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47326 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a0ec6e566511 Credits Dimas Maulana Required privilege...

WordPress GEO my WordPress Plugin <= 4.5.0.3 is vulnerable to Cross Site Scripting (XSS)

Software GEO my WordPress Type Plugin Vulnerable versions = 4.5.0.3 Fixed in 4.5.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47327 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ae4773f8057e Credits Le Ngoc Anh Required...

WordPress Sunshine Photo Cart Plugin <= 3.2.8 is vulnerable to Broken Access Control

Software Sunshine Photo Cart Type Plugin Vulnerable versions = 3.2.8 Fixed in 3.2.9 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-47314 Patch priority Medium CVSS severity Medium 7.1 Developer WP Sunshine PSID ce1d02e75c65 Credits Trương Hữu Phúc...

WordPress SmartSearch WP Plugin < 2.4.6 is vulnerable to Sensitive Data Exposure

Software SmartSearch WP Type Plugin Vulnerable versions 2.4.6 Fixed in 2.4.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6845 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID e581162ffbea Credits Kieran Burge Required...

WordPress Templately Plugin <= 3.1.2 is vulnerable to Broken Access Control

Software Templately Type Plugin Vulnerable versions = 3.1.2 Fixed in 3.1.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-47308 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID e4f1c6a95d39 Credits Joshua Chan Required privile...

WordPress XT Ajax Add To Cart for WooCommerce Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software XT Ajax Add To Cart for WooCommerce Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8716 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID eca37d7857f2 Credit...

WordPress viala Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Software viala Type Theme Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44029 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID babe5272f0f7 Credits justakazh Required privilege Unauthenticated...

WordPress NiceJob Plugin < 3.6.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software NiceJob Type Plugin Vulnerable versions 3.6.5 Fixed in 3.6.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-44028 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ba7b34b9da8d Credits SOPROBRO Required...

WordPress Kodex Posts likes Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Kodex Posts likes Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8713 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 83c067bae0c0 Credits vgo0 Required...

WordPress CP Polls Plugin <= 1.0.74 is vulnerable to Cross Site Scripting (XSS)

Software CP Polls Type Plugin Vulnerable versions = 1.0.74 Fixed in 1.0.75 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47297 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bd0fc6118ee8 Credits Muhamad Agil Fachrian Required...

WordPress Pixel Cat Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Pixel Cat Type Plugin Vulnerable versions = 3.0.5 Fixed in 3.0.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8544 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4e86320ad402 Credits vgo0 Required privilege...