WordPress Oxygen Builder Plugin <= 4.9 is vulnerable to Remote Code Execution (RCE)

Software Oxygen Builder Type Plugin Vulnerable versions = 4.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-31380 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 4b3933c6a6e8 Credits Snicco Required privilege Contributo...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : perl-DBD-SQLite (SUSE-SU-2024:1086-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1086-1 advisory. - rebuild against current system sqlite. bsc1218946 Tenable has extracted the preceding description block...

WordPress Themify – WooCommerce Product Filter Plugin < 1.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Themify – WooCommerce Product Filter Type Plugin Vulnerable versions 1.4.4 Fixed in 1.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2263 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2af17750bb44 Credits...

WordPress Responsive Theme <= 5.0.2 is vulnerable to Broken Access Control

Software Responsive Type Theme Vulnerable versions = 5.0.2 Fixed in 5.0.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2848 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4e54d82df723 Credits Krzysztof Zając - CERT PL...

WordPress WP-Members Plugin <= 3.4.9.2 is vulnerable to Cross Site Scripting (XSS)

Software WP-Members Type Plugin Vulnerable versions = 3.4.9.2 Fixed in 3.4.9.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1852 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 145e334b433b Credits Webbernaut Required...

WordPress WP ERP Plugin <= 1.12.9 is vulnerable to Cross Site Scripting (XSS)

Software WP ERP Type Plugin Vulnerable versions = 1.12.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0609 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 78bf5e397b34 Credits Krzysztof Zając Required...

openSUSE 15 Security Update : kanidm (openSUSE-SU-2024:0095-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0095-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

WordPress New Order Notification for Woocommerce Plugin <= 2.0.2 is vulnerable to Broken Access Control

Software New Order Notification for Woocommerce Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31098 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f43459ca9b98 Credits...

WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.7 is vulnerable to Broken Access Control

Software Shortcodes and extra features for Phlox theme Type Plugin Vulnerable versions = 2.15.7 Fixed in 2.15.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31099 Patch priority Medium CVSS severity Medium 6.4 Developer Claim ownership PSID 6820fd10e35f...

WordPress Weekly Class Schedule Plugin <= 3.19 is vulnerable to Cross Site Scripting (XSS)

Software Weekly Class Schedule Type Plugin Vulnerable versions = 3.19 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31084 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9a05f9bc5077 Credits Dimas Maulana Required...

WordPress Sticky Anything Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Sticky Anything Type Plugin Vulnerable versions = 2.1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30551 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 25bb0e7db645 Credits Mika Required privilege...

WordPress Christmas Greetings Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)

Software Christmas Greetings Type Plugin Vulnerable versions = 1.2.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2116 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 410abc2ecae6 Credits Lucio Sá Require...

WordPress Comic Easel Plugin <= 1.15 is vulnerable to Cross Site Scripting (XSS)

Software Comic Easel Type Plugin Vulnerable versions = 1.15 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31092 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1ef1de760870 Credits Dimas Maulana Required privilege...

WordPress Header Image Slider Plugin <= 0.3 is vulnerable to Cross Site Scripting (XSS)

Software Header Image Slider Type Plugin Vulnerable versions = 0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30547 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 96f5b84d4f33 Credits Dimas Maulana Required privilege...

WordPress Tax Rate Upload Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Software Tax Rate Upload Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31105 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 687c051f0fb1 Credits thiennv Required privilege...

WordPress Contact Form 7 Newsletter Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form 7 Newsletter Type Plugin Vulnerable versions = 2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31110 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d60fc2231b4d Credits Dimas Maulana Required...

WordPress Lightbox slider – Responsive Lightbox Gallery Plugin <= 1.9.9 is vulnerable to PHP Object Injection

Software Lightbox slider – Responsive Lightbox Gallery Type Plugin Vulnerable versions = 1.9.9 Fixed in 1.10.0 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-1858 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID c570605cfccd Credits...

WordPress Woocommerce Social Media Share Buttons Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Woocommerce Social Media Share Buttons Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31109 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2941fe56e84a Credits Dimas Maula...

WordPress SEO Title Tag Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS)

Software SEO Title Tag Type Plugin Vulnerable versions = 3.5.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31097 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7390e13eda59 Credits Dimas Maulana Required privilege...

WordPress User Rights Access Manager Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)

Software User Rights Access Manager Type Plugin Vulnerable versions = 1.1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31122 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 0673dec6d13c Credits Yudistira Arya Required...