WordPress Porsline Plugin <= 1.0.2 is vulnerable to SQL Injection

Software Porsline Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51620 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 61079a1722c7 Credits LVT-tholv2k Required privilege Contributor Published 31...

WordPress amazing neo icon font for elementor Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software amazing neo icon font for elementor Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50543 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 973c64009b42 Credits Gab Required privile...

WordPress Elementary Addons Plugin <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Elementary Addons Type Plugin Vulnerable versions = 2.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51586 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d3940bbe2b1c Credits Gab Required privilege Contributor...

WordPress Show Visitor IP Address Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)

Software Show Visitor IP Address Type Plugin Vulnerable versions = 0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50538 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 14c2541462c0 Credits SOPROBRO Required privilege...

WordPress ML Responsive Audio player with playlist Shortcode Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)

Software ML Responsive Audio player with playlist Shortcode Type Plugin Vulnerable versions = 0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51573 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3027c5f59333 Credits SOPROBR...

WordPress Forminator Plugin <= 1.36.0 is vulnerable to Insecure Direct Object References (IDOR)

Software Forminator Type Plugin Vulnerable versions = 1.36.0 Fixed in 1.36.1 OWASP Top 10 A3: Injection Classification Insecure Direct Object References IDOR CVE CVE-2024-9700 Patch priority Low CVSS severity Low 5.3 Developer WPMU DEV PSID f94c41be5520 Credits Vijaysimha Reddy vijaysimha Require...

WordPress Golf Tracker Plugin <= 0.7 is vulnerable to SQL Injection

Software Golf Tracker Type Plugin Vulnerable versions = 0.7 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51607 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 38232c097728 Credits LVT-tholv2k Required privilege Contributor Published 31...

WordPress Simple Job Manager Plugin <= 1.1 is vulnerable to SQL Injection

Software Simple Job Manager Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51602 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a7e27e792959 Credits LVT-tholv2k Required privilege Contributor Publish...

WordPress Quran Shortcode Plugin <= 1.5 is vulnerable to SQL Injection

Software Quran Shortcode Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51625 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID c3f04d230d13 Credits LVT-tholv2k Required privilege Contributor Published ...

WordPress Selar.co Widget Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Selar.co Widget Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51598 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e6f82418395f Credits SOPROBRO Required privilege Contributor...

WordPress Market 360 Viewer Plugin <= 1.01 is vulnerable to SQL Injection

Software Market 360 Viewer Type Plugin Vulnerable versions = 1.01 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51619 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 2a1f922321c0 Credits LVT-tholv2k Required privilege Contributor Publish...

WordPress MPG Plugin <= 4.0.1 is vulnerable to Broken Access Control

Software MPG Type Plugin Vulnerable versions = 4.0.1 Fixed in 4.0.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-7424 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 61dc998feee8 Credits Rafshanzani Suhada Required privilege...

WordPress Emoji Shortcode Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Emoji Shortcode Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51609 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6ec03d2b4a66 Credits SOPROBRO Required privilege Contributor...

WordPress Easy Gallery Plugin <= 1.4 is vulnerable to SQL Injection

Software Easy Gallery Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51570 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 71bb9789b0d3 Credits LVT-tholv2k Required privilege Contributor Published 31...

WordPress Simple Business Manager Plugin <= 4.6.7.4 is vulnerable to Cross Site Scripting (XSS)

Software Simple Business Manager Type Plugin Vulnerable versions = 4.6.7.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51599 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 60b5b7d689c0 Credits CTRL Chance Required privilege...

WordPress Simple Goods Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Simple Goods Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51574 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 145a6f76509a Credits SOPROBRO Required privilege Contributor...

WordPress WP EIS Plugin <= 1.3.3 is vulnerable to SQL Injection

Software WP EIS Type Plugin Vulnerable versions = 1.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51623 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 656cfa7c68ad Credits LVT-tholv2k Required privilege Contributor Published 31...

WordPress Website price calculator Plugin <= 4.1 is vulnerable to SQL Injection

Software Website price calculator Type Plugin Vulnerable versions = 4.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51601 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 363bcb5a02a5 Credits LVT-tholv2k Required privilege Contributor...

WordPress WP Hotel Booking Plugin <= 2.1.4 is vulnerable to Local File Inclusion

Software WP Hotel Booking Type Plugin Vulnerable versions = 2.1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-51582 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 5c0a345b0a12 Credits ghsinfosec Required privilege Contributor...

WordPress WP EASY RECIPE Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)

Software WP EASY RECIPE Type Plugin Vulnerable versions = 1.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51622 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2693b889c919 Credits SOPROBRO Required privilege Contributor...