WordPress Events Addon for Elementor Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Events Addon for Elementor Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49264 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3eb8df0d8285 Credits João Pedro S Alcântara...

WordPress bVerse Convert Plugin <= 1.3.7.1 is vulnerable to Cross Site Scripting (XSS)

Software bVerse Convert Type Plugin Vulnerable versions = 1.3.7.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49228 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d79019a98035 Credits SOPROBRO Required privilege Contributor...

WordPress ImagePress Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software ImagePress Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.3.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-9778 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 64726d176639 Credits Michelle Porter Required...

WordPress Plexx Elementor Extension Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Plexx Elementor Extension Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49234 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d2192b71a7de Credits Khalid Yusuf Required...

WordPress Contact Forms, Live Support, CRM, Video Messages Plugin <= 1.10.2 is vulnerable to Sensitive Data Exposure

Software Contact Forms, Live Support, CRM, Video Messages Type Plugin Vulnerable versions = 1.10.2 Fixed in 1.11.1 OWASP Top 10 A8: Software and Data Integrity Failures Classification Sensitive Data Exposure CVE CVE-2024-49235 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSI...

WordPress Free Stock Photos Foter Plugin <= 1.5.4 is vulnerable to PHP Object Injection

Software Free Stock Photos Foter Type Plugin Vulnerable versions = 1.5.4 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49227 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 0e6ee5afeccb Credits LVT-tholv2k Required privilege...

WordPress Linked Variation for WooCommerce Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Linked Variation for WooCommerce Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-48047 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 314234821b77 Credits Marek Mikita...

WordPress 2D Tag Cloud Plugin <= 6.0.2 is vulnerable to Cross Site Scripting (XSS)

Software 2D Tag Cloud Type Plugin Vulnerable versions = 6.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9670 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b507e6e6c829 Credits Francesco Carlucci...

WordPress Social Auto Poster Plugin <= 5.3.15 is vulnerable to Cross Site Request Forgery (CSRF)

Software Social Auto Poster Type Plugin Vulnerable versions = 5.3.15 Fixed in 5.3.16 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49272 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d78a86986549 Credits Ananda Dhakal...

WordPress Unlimited Addon For Elementor Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Unlimited Addon For Elementor Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49267 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3bb661ecb7f8 Credits João Pedro S Alcântara...

WordPress CSV Product Import Export for WooCommerce Plugin <= 1.0.0 is vulnerable to SQL Injection

Software CSV Product Import Export for WooCommerce Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-49244 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 62295a347894 Credits Hakiduck Required...

WordPress Order Attachments for WooCommerce Plugin 2.0 - 2.4.1 is vulnerable to Broken Access Control

Software Order Attachments for WooCommerce Type Plugin Vulnerable versions 2.0 - 2.4.1 Fixed in 2.5.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9756 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID dca315263a7c Credits luckynoo...

WordPress BuddyPress Better Registration Plugin <= 1.6 is vulnerable to Broken Authentication

Software BuddyPress Better Registration Type Plugin Vulnerable versions = 1.6 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-49247 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 4288fed05f70...

WordPress CJ Change Howdy Plugin <= 3.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software CJ Change Howdy Type Plugin Vulnerable versions = 3.3.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49223 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d1b937179167 Credits SOPROBRO Requir...

WordPress Cookie Scanner Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Cookie Scanner Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49220 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 18da6e2fb5aa Credits SOPROBRO Required...

WordPress Social Sharing (by Danny) Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

Software Social Sharing by Danny Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9704 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 88d510b46b3a Credits Peter Thaleikis...

WordPress Recently Plugin <= 1.1 is vulnerable to PHP Object Injection

Software Recently Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49218 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID dfdd033e65c6 Credits LVT-tholv2k Required privilege Unauthenticated...

WordPress Contact Form by Supsystic Plugin <= 1.7.28 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form by Supsystic Type Plugin Vulnerable versions = 1.7.28 Fixed in 1.7.29 OWASP Top 10 A4: Insecure Design Classification Cross Site Scripting XSS CVE CVE-2024-48046 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cce1073296d4 Credits UKO Required privile...

WordPress disconnected Theme <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software disconnected Type Theme Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49268 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8595c00a71d4 Credits justakazh Required privilege...

WordPress Crazy Call To Action Box Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Crazy Call To Action Box Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49236 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0654c27932a5 Credits SOPROBRO Required privilege...