WordPress WooCommerce Support Ticket System Plugin <= 17.6 is vulnerable to Arbitrary File Deletion

Software WooCommerce Support Ticket System Type Plugin Vulnerable versions = 17.6 Fixed in 17.8 OWASP Top 10 A3: Injection Classification Arbitrary File Deletion CVE CVE-2024-10625 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID b5c39d8368a0 Credits Tonn Required privile...

WordPress Utech Spinning Earth Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Utech Spinning Earth Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51839 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b242dc4ec571 Credits SOPROBRO Required privilege Contribut...

WordPress Ekiline Block Collection Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Ekiline Block Collection Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51934 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID cbe34a868517 Credits SOPROBRO Required privilege...

WordPress File Select Control For Elementor Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software File Select Control For Elementor Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51841 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aa95e9a9fba3 Credits Gab Required privilege...

WordPress Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)

Software Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera Type Plugin Vulnerable versions = 4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52347 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID...

WordPress Posts Search Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Posts Search Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51884 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c9222a2124ac Credits SOPROBRO Required privilege Contributor...

WordPress Browsing History Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Browsing History Type Plugin Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51885 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e79fa8e92191 Credits SOPROBRO Required privilege Contributor...

WordPress Map Store Locator Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Map Store Locator Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51920 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3bad7bf99174 Credits SOPROBRO Required privilege Contributo...

WordPress Magic Slider Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Magic Slider Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51896 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bd20a951d682 Credits SOPROBRO Required privilege Contributor...

WordPress Responsive Filterable Portfolio plugin <= 1.0.22 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Zaidan Rizaki Patchstack Alliance in WordPress Plugin Responsive Filterable Portfolio versions = 1.0.22...

WordPress Daily Image plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Daily Image versions = 1.0...

WordPress PropertyShift plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin PropertyShift versions = 1.0.0...

WordPress WPHelpful plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WPHelpful versions = 1.2.4...

WordPress Simplistic SEO plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Simplistic SEO versions = 2.3.0...

WordPress TeleAdmin plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin TeleAdmin versions = 1.0.0...

WordPress Buooy Sticky Header plugin <= 0.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Buooy Sticky Header versions = 0.5.2...

WordPress Geotagged Media plugin <= 0.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Geotagged Media versions = 0.3.0...

WordPress WPHelpful Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)

Software WPHelpful Type Plugin Vulnerable versions = 1.2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51761 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 740c174aa3ba Credits Mika Required privilege Unauthenticated...

WordPress imPress Plugin <= 0.1.4 is vulnerable to Cross Site Scripting (XSS)

Software imPress Type Plugin Vulnerable versions = 0.1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51704 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 84f40b8b861e Credits João Pedro S Alcântara Kinorth Required...

WordPress User Password Reset Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software User Password Reset Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51714 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 916db7652ed6 Credits SOPROBRO Required privilege...