231554 matches found
CVE-2024-32720
CVE-2024-32720 corresponds to a CAPTCHA bypass vulnerability in the WordPress plugin Appointment Hour Booking (versions
CVE-2024-32692
CVE-2024-32692 affects Chauffeur Taxi Booking System for WordPress (plugin) up to version 6.9. Root cause: Missing authorization controls leading to an authentication/authorization bypass that allows accessing constrained functionality. Impact: as described, enables accessing functionality not pr...
CVE-2024-32685
CVE-2024-32685 targets the WP Ultimate Review WordPress plugin (
CVE-2024-32523
CVE-2024-32523 is an unauthenticated Path Traversal leading to PHP Local File Inclusion in Mailster WordPress plugin
CVE-2024-32521
CVE-2024-32521 affects the WordPress plugin Zero Spam by Highfivery (versions
CVE-2024-32512
The CVE-2024-32512 entry concerns the WordPress weForms plugin (versions up to and including 1.6.20) with a Form Submission Restriction Bypass issue caused by Client-Side Enforcement of Server-Side Security. Affected component: weForms form submission logic; root cause: client-side enforcement al...
CVE-2024-32511
CVE-2024-32511 affects WordPress plugin Simple Registration for WooCommerce (Astoundify) up to version 1.5.6. The issue is described as an unauthenticated privilege-escalation due to improper privilege management, enabling an attacker to elevate permissions without authentication. Public referenc...
CVE-2024-31300
CVE-2024-31300 is a path traversal vulnerability in the WordPress plugin Easy Social Share Buttons (for WordPress) that allows PHP Local File Inclusion. Affected: Easy Social Share Buttons for WordPress, versions up to and including 9.4. Root cause: improper limitation of a pathname to a restrict...
CVE-2024-31290
CVE-2024-31290 is an unauthenticated privilege-escalation vulnerability in the Demo My WordPress plugin. The issue arises from improper privilege management and affects Demo My WordPress versions up to 1.0.9.1 (vendors indicate vulnerability as affecting the plugin across these versions). Public ...
CVE-2024-31281
CVE-2024-31281 is a Missing Authorization vulnerability in the WordPress plugin Church Admin (church-admin) affecting versions up to 4.1.6. Public records consistently describe it as a broken access control vulnerability that allows exploitation due to incorrectly configured access control securi...
CVE-2024-31237
CVE-2024-31237 affects the WordPress plugin s2Member Pro (WP Sharks). It is an Improper Privilege Management vulnerability enabling Privilege Escalation in s2Member Pro versions from n/a up to 240315. The Red Hat entry and other records confirm Privilege Escalation as the impact. A remediation is...
CVE-2024-31232
The CVE-2024-31232 issue affects the WordPress plugin/theme Rehub (Sizam Design) and is a Path Traversal vulnerability: Improperly limited pathname allows PHP Local File Inclusion. Affected versions are Rehub up to 19.6.1 (including Rehub theme). Root cause, as described in the sources, is an una...
CVE-2024-31231
CVE-2024-31231 affects the WordPress Rehub theme (
CVE-2024-30509
CVE-2024-30509 corresponds to a WordPress SellKit vulnerability (
CVE-2024-27971
CVE-2024-27971 is a path traversal causing unauthenticated local file inclusion in the WordPress plugin Premmerce Permalink Manager for WooCommerce . The issue affects versions from before 2.3.11 (i.e., up to 2.3.10) and stems from improper limitation of a pathname to a restricted directory. Publ...
CVE-2024-27954
WordPress Automatic plugin
CVE-2024-24882
CVE-2024-24882 affects the WordPress plugin Masteriyo LMS (
CVE-2024-24869
CVE-2024-24869 affects BoldGrid Total Upkeep (WordPress plugin)