WordPress Linked Variation for WooCommerce Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Linked Variation for WooCommerce Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-48047 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 314234821b77 Credits Marek Mikita...

WordPress ImagePress Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software ImagePress Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.3.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-9778 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 64726d176639 Credits Michelle Porter Required...

WordPress 2D Tag Cloud Plugin <= 6.0.2 is vulnerable to Cross Site Scripting (XSS)

Software 2D Tag Cloud Type Plugin Vulnerable versions = 6.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9670 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b507e6e6c829 Credits Francesco Carlucci...

WordPress Social Auto Poster Plugin <= 5.3.15 is vulnerable to Cross Site Request Forgery (CSRF)

Software Social Auto Poster Type Plugin Vulnerable versions = 5.3.15 Fixed in 5.3.16 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49272 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d78a86986549 Credits Ananda Dhakal...

WordPress Order Attachments for WooCommerce Plugin 2.0 - 2.4.1 is vulnerable to Broken Access Control

Software Order Attachments for WooCommerce Type Plugin Vulnerable versions 2.0 - 2.4.1 Fixed in 2.5.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9756 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID dca315263a7c Credits luckynoo...

WordPress BuddyPress Better Registration Plugin <= 1.6 is vulnerable to Broken Authentication

Software BuddyPress Better Registration Type Plugin Vulnerable versions = 1.6 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-49247 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 4288fed05f70...

WordPress CJ Change Howdy Plugin <= 3.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software CJ Change Howdy Type Plugin Vulnerable versions = 3.3.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49223 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d1b937179167 Credits SOPROBRO Requir...

WordPress Cookie Scanner Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Cookie Scanner Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49220 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 18da6e2fb5aa Credits SOPROBRO Required...

WordPress Social Sharing (by Danny) Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

Software Social Sharing by Danny Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9704 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 88d510b46b3a Credits Peter Thaleikis...

WordPress Recently Plugin <= 1.1 is vulnerable to PHP Object Injection

Software Recently Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49218 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID dfdd033e65c6 Credits LVT-tholv2k Required privilege Unauthenticated...

WordPress TablePress Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)

Software TablePress Type Plugin Vulnerable versions = 2.4.2 Fixed in 2.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9595 Patch priority Low CVSS severity Low 5.9 Developer TablePress PSID e1ecd7cf1ef2 Credits Max Boll b0lli Required privilege...

WordPress WP-Spreadplugin Plugin <= 4.8.9 is vulnerable to Cross Site Scripting (XSS)

Software WP-Spreadplugin Type Plugin Vulnerable versions = 4.8.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49266 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8199a02bf929 Credits Sharanabasappa Required privilege...

WordPress disconnected Theme <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software disconnected Type Theme Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49268 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8595c00a71d4 Credits justakazh Required privilege...

WordPress Crazy Call To Action Box Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Crazy Call To Action Box Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49236 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0654c27932a5 Credits SOPROBRO Required privilege...

WordPress Tito Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

Software Tito Type Plugin Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49241 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2018b376dfd6 Credits theviper17 Required privilege Contributor Published 1...

WordPress Dynamic Elementor Addons Plugin <= 1.0.0 is vulnerable to Local File Inclusion

Software Dynamic Elementor Addons Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-49243 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID d810ec8583c8 Credits João Pedro S Alcântara Kinorth...

WordPress WordPress File Upload Plugin <= 4.24.11 is vulnerable to Path Traversal

Software WordPress File Upload Type Plugin Vulnerable versions = 4.24.11 Fixed in 4.24.12 OWASP Top 10 A1: Broken Access Control Classification Path Traversal CVE CVE-2024-9047 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 5fa6436aa19c Credits Arkadiusz Hydzik Required...

WordPress WP Post Author Plugin <= 3.8.1 is vulnerable to SQL Injection

Software WP Post Author Type Plugin Vulnerable versions = 3.8.1 Fixed in 3.8.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-8757 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 459e7e4ad115 Credits Lesor101 Required privilege Administrator Published...

WordPress Contact Form by Supsystic Plugin <= 1.7.28 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form by Supsystic Type Plugin Vulnerable versions = 1.7.28 Fixed in 1.7.29 OWASP Top 10 A4: Insecure Design Classification Cross Site Scripting XSS CVE CVE-2024-48046 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cce1073296d4 Credits UKO Required privile...

WordPress Arkhe Blocks Plugin <= 2.23.0 is vulnerable to Cross Site Scripting (XSS)

Software Arkhe Blocks Type Plugin Vulnerable versions = 2.23.0 Fixed in 2.27.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49261 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 386d6bb461b6 Credits João Pedro S Alcântara Kinorth Required...