WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.4.2 is vulnerable to Local File Inclusion

Software Online Booking & Scheduling Calendar for WordPress by vcita Type Plugin Vulnerable versions = 4.4.2 Fixed in 4.4.3 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-37499 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID...

WordPress Paytium Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Paytium Type Plugin Vulnerable versions = 4.4.2 Fixed in 4.4.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25099 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5a3bcaaed120 Credits Ngô Thiên An ancorn from VNPT-VCI Required...