WordPress WP Virtual Room Configurator Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Virtual Room Configurator Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51907 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 307fc19fd58d Credits SOPROBRO Required privilege...

WordPress Olympus Shortcodes Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Olympus Shortcodes Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51857 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aec746b4a78a Credits SOPROBRO Required privilege Contribut...

WordPress Sell Media File with Stripe Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Sell Media File with Stripe Type Plugin Vulnerable versions = 1.0.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51892 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID af1c67b9897b Credits SOPROBRO Required privilege...

WordPress Google Visualization Charts Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)

Software Google Visualization Charts Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51862 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1b29248315f5 Credits SOPROBRO Required privilege...

WordPress L Squared Hub WP Plugin <= 1.0 is vulnerable to SQL Injection

Software L Squared Hub WP Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51820 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID b1c1c7bbdde2 Credits LVT-tholv2k Required privilege Contributor Published...

WordPress RSV 360 View Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software RSV 360 View Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51906 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 10130673798c Credits SOPROBRO Required privilege Contributor...

WordPress Storely Theme <= 14.7 is vulnerable to Cross Site Scripting (XSS)

Software Storely Type Theme Vulnerable versions = 14.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51794 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 445ba07ef882 Credits stealthcopter Required privilege Contributor...

WordPress Envo Extra Plugin <= 1.9.3 is vulnerable to Sensitive Data Exposure

Software Envo Extra Type Plugin Vulnerable versions = 1.9.3 Fixed in 1.9.4 OWASP Top 10 A3: Injection Classification Sensitive Data Exposure CVE CVE-2024-10770 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c74e911b1aae Credits Francesco Carlucci Required privilege...

WordPress Social button Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Social button Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51866 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3298adb5e8ae Credits SOPROBRO Required privilege Contributor...

WordPress Anant Addons for Elementor Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Anant Addons for Elementor Type Plugin Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51813 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a1918ff11f57 Credits Gab Required privilege...

WordPress OSM – OpenStreetMap Plugin <= 6.1.2 is vulnerable to Cross Site Scripting (XSS)

Software OSM – OpenStreetMap Type Plugin Vulnerable versions = 6.1.2 Fixed in 6.1.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52355 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 68bca5f9bb55 Credits Junwoo Kang Required privilege...

WordPress Bread & Butter Plugin <= 7.4.857 is vulnerable to Cross Site Scripting (XSS)

Software Bread & Butter Type Plugin Vulnerable versions = 7.4.857 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51802 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9da54844a736 Credits SOPROBRO Required privilege Contributor...

WordPress Audio Record Plugin <= 1.0 is vulnerable to Arbitrary File Upload

Software Audio Record Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-51792 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 6342416d8183 Credits stealthcopter Required privilege Unauthenticate...

WordPress Stylish Internal Links Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)

Software Stylish Internal Links Type Plugin Vulnerable versions = 1.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51939 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 514970e5a542 Credits Zlrqh Required privilege Contributo...

WordPress best bootstrap widgets for elementor Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software best bootstrap widgets for elementor Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51851 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3c6e5776818f Credits Gab Required privileg...

WordPress I Plant A Tree Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

Software I Plant A Tree Type Plugin Vulnerable versions = 1.7.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51883 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 73334290309f Credits SOPROBRO Required privilege Contributor...

WordPress Brand my Footer Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Brand my Footer Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51801 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2b661efe3aa8 Credits SOPROBRO Required privilege Contributor...

WordPress Pro Addons For Elementor Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Pro Addons For Elementor Type Plugin Vulnerable versions = 1.5.0 Fixed in 1.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51812 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b0c22c1328af Credits Gab Required privilege...

WordPress The Novel Design Store Directory Plugin <= 4.3.0 is vulnerable to Arbitrary File Upload

Software The Novel Design Store Directory Type Plugin Vulnerable versions = 4.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-51788 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 7c858add083e Credits stealthcopter Required...

WordPress Easy Social Sharebar Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Easy Social Sharebar Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51833 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 39ebcdfedab1 Credits SOPROBRO Required privilege...