WordPress Websand Subscription Form Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Websand Subscription Form Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51923 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9a8e64378983 Credits SOPROBRO Required privilege...

WordPress Forms Plugin <= 2.8.0 is vulnerable to Arbitrary File Upload

Software Forms Type Plugin Vulnerable versions = 2.8.0 Fixed in 2.8.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-51791 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 0594a374dbac Credits stealthcopter Required privilege Unauthenticated...

WordPress ParOne Feeds Plugin <= 1.17.1 is vulnerable to Cross Site Scripting (XSS)

Software ParOne Feeds Type Plugin Vulnerable versions = 1.17.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51874 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ec150fe70148 Credits SOPROBRO Required privilege Contributor...

WordPress WP Membership Plugin <= 1.6.2 is vulnerable to Arbitrary File Upload

Software WP Membership Type Plugin Vulnerable versions = 1.6.2 Fixed in 1.6.3 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-10547 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 06e3f08b54a5 Credits Tonn Required privilege Unauthenticated...

WordPress Simple Social Share Block Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Social Share Block Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51865 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8b3f455be888 Credits SOPROBRO Required privilege...

WordPress Landing Page Cat Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)

Software Landing Page Cat Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9226 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a9da6507309 Credits vgo0 Required...

WordPress Gboy Custom Google Map Plugin <= 1.2 is vulnerable to SQL Injection

Software Gboy Custom Google Map Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51882 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID f6723f3242c3 Credits LVT-tholv2k Required privilege Contributor...

WordPress News Ticker Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software News Ticker Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51830 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 31c1d84151aa Credits SOPROBRO Required privilege Contributor...

WordPress codeSnips Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software codeSnips Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51808 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b3a7768e4e50 Credits SOPROBRO Required privilege Contributor Publishe...

WordPress Testimonial Slider Shortcode Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Testimonial Slider Shortcode Type Plugin Vulnerable versions = 1.1.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51925 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 59c82ea20053 Credits Gab Required privilege...

WordPress Luzuk Testimonials Plugin <= 0.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Luzuk Testimonials Type Plugin Vulnerable versions = 0.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51872 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e42d6eaf9f4a Credits SOPROBRO Required privilege Contribut...

WordPress WPLMS Theme <= 4.962 is vulnerable to Path Traversal

Software WPLMS Type Theme Vulnerable versions = 4.962 Fixed in 4.963 OWASP Top 10 A3: Injection Classification Path Traversal CVE CVE-2024-10470 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 63557cc0ea32 Credits Foxyyy Required privilege Unauthenticated Published 8...

WordPress Luzuk Team Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Luzuk Team Type Plugin Vulnerable versions = 0.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51871 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e6aea35011f1 Credits SOPROBRO Required privilege Contributor...

WordPress Simpul Events by Esotech Plugin <= 1.8.5 is vulnerable to Cross Site Scripting (XSS)

Software Simpul Events by Esotech Type Plugin Vulnerable versions = 1.8.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51867 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c47f1b0c8089 Credits SOPROBRO Required privilege...

WordPress Mapme Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

Software Mapme Type Plugin Vulnerable versions = 1.3.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51913 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e5366a95b3d4 Credits SOPROBRO Required privilege Contributor Published ...

WordPress Elementor – Header, Footer & Blocks Template Plugin <= 1.6.45 is vulnerable to Cross Site Scripting (XSS)

Software Elementor – Header, Footer & Blocks Template Type Plugin Vulnerable versions = 1.6.45 Fixed in 1.6.46 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10325 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3bcf490aa26b...

WordPress CE21 Suite Plugin <= 2.2.0 is vulnerable to Broken Access Control

Software CE21 Suite Type Plugin Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10294 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 61161cac4b51 Credits István Márton Required privile...

WordPress Ekiline Block Collection Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Ekiline Block Collection Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51934 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID cbe34a868517 Credits SOPROBRO Required privilege...

WordPress Horsemanager Plugin <= 1.3 is vulnerable to SQL Injection

Software Horsemanager Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51843 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID f1d36b40ea39 Credits LVT-tholv2k Required privilege Contributor Published 8...

WordPress Responsive Addons for Elementor Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Addons for Elementor Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52358 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5e0984c9c585 Credits Khalid Yusuf Required...