CVE-2024-21610

Summary (CVE-2024-21610) : A vulnerability in Juniper Networks Junos OS cosd (Class of Service daemon) on MX Series allows an authenticated, low-privileged attacker to cause a limited DoS by handling specific low-privileged commands (via NETCONF, SSH, or Telnet) on behalf of mgd; mgd processes ca...

CVE-2024-21598

CVE-2024-21598 affects Juniper Networks Junos OS and Junos OS Evolved, where the Routing Protocol Daemon (rpd) crashes and restarts when receiving a BGP update containing a malformed TLV in a tunnel encapsulation attribute. This is due to improper validation of syntactic correctness of input. Imp...

CVE-2023-51515

CVE-2023-51515 affects Uncode Core (WordPress plugin) up to version 2.8.8, with a Missing Authorization vulnerability enabling Privilege Escalation. Multiple sources confirm the issue and that a fix exists; remediation is to upgrade to a non-vulnerable version (patched). If upgrading is not immed...

CVE-2023-51499

CVE-2023-51499 affects the WordPress WooCommerce Shipping Per Product plugin. Connected sources describe a Missing Authorization/Broken Access Control flaw in versions up to 2.5.4, enabling unauthorized access to affected resources. Remediation per sources is to upgrade to a fixed version (2.5.5+...

CVE-2023-52211

The CVE-2023-52211 entry concerns the WordPress WP Job Manager plugin (

CVE-2024-3707

OpenGnsys version 1.1.1d (Espeto) is affected by CVE-2024-3707, an information exposure vulnerability in the web interface that allows an attacker to enumerate all files in the web tree by accessing a PHP file. The issue is described as a directory-listing / information disclosure flaw in OpenGns...

CVE-2024-3705

CVE-2024-3705 affects OpenGnsys 1.1.1d (Espeto). The flaw is an unrestricted file upload via POST to /opengnsys/images/M_Icons.php due to missing file-extension verification, enabling potential webshell injection with high impact (C:H/I:H/A:H). Documents confirm the vulnerable component and root ...

CVE-2023-51409

Summary of CVE-2023-51409 : The WordPress plugin “AI Engine: ChatGPT Chatbot” (ai-engine) is affected by an Unrestricted Upload of File with Dangerous Type vulnerability. From the connected documents, vulnerable versions are up to 1.9.98, with unauthenticated attackers able to upload arbitrary fi...

CVE-2022-40211

CVE-2022-40211 affects the WordPress GiveWP plugin

CVE-2024-31262

CVE-2024-31262 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WooCommerce Checkout Field Editor (Checkout Manager) . The affected product is the Checkout Field Editor/Checkout Manager plugin for WooCommerce, with versions up to and including 2.1.8 (version range unsp...

CVE-2024-31265

CVE-2024-31265 : WordPress plugin SumoMe Sumo has a CSRF vulnerability affecting versions up to 1.34. The connected sources confirm the vulnerability exists but do not provide patch/version remediation details. CVSSv3.1 base metrics: Score 3.7 (Low) with Network attack vector, high attack complex...

CVE-2024-31268

CVE-2024-31268 is a CSRF vulnerability in AppPresser (WordPress plugin) affecting AppPresser up to version 4.3.0. The connected data confirms a CSRF path via the toggle_logging_callback, allowing an attacker to induce a user action on behalf of a logged-in user. The CVE description itself states ...

CVE-2024-31269

CVE-2024-31269 is a CSRF vulnerability in the Supsystic Easy Google Maps WordPress plugin, affecting versions up to 1.11.11. The issue stems from missing nonce validation, enabling forged requests to perform actions on behalf of an authenticated user. Public materials confirm the CSRF nature and ...

CVE-2024-31271

CVE-2024-31271 is a CSRF vulnerability in the WordPress plugin Ultimate Maps by Supsystic, affecting versions up to 1.2.16. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N with base score 4.3 (Medium). No exploit details are provided in the documents; exploitation status is n...

CVE-2024-31289

CVE-2024-31289 pertains to the WordPress Hello Elementor theme (Hello Elementor) and is described as a Cross-Site Request Forgery (CSRF) vulnerability affecting versions up to 3.0.0. The Connected documents do not provide technical details beyond the CSRF classification and affected product/versi...

CVE-2024-31301

CVE-2024-31301 is a CSRF vulnerability in the Themeisle Multiple Page Generator Plugin – MPG, affecting versions up to 3.4.0. The connected sources confirm the issue is CSRF in that plugin and link it to the same CVE entry. The provided documents describe the root cause as cross-site request forg...

CVE-2024-31303

CVE-2024-31303 corresponds to a CSRF vulnerability in the WordPress Sign-up Sheets plugin (versions up to 2.2.11.1). Affected software is Sign-up Sheets for WordPress; root cause is CSRF, with potential impact described as I=Low, C=None, A=None, requiring user interaction (UI:R). The description ...

CVE-2024-31360

CVE-2024-31360: CSRF in Benchmark Email Lite for WordPress (Benchmark Email Lite

CVE-2024-31363

The CVE-2024-31363 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress LifterLMS plugin, affecting versions n/a through 7.5.0. The issue targets the LifterLMS component and enables an attacker to induce unintended actions on a user’s authenticated session via CSRF. ...

CVE-2024-3211

CVE-2024-3211 affects the WordPress plugin Shopping Cart & eCommerce Store (wp-easycart) for versions up to 5.6.3. The vulnerability is an SQL Injection via the ec_addtocart shortcode’s productid attribute, caused by insufficient escaping and inadequate query preparation. This allows authenticate...