WordPress Themify Folo Theme <= 1.9.6 is vulnerable to Cross Site Scripting (XSS)

Software Themify Folo Type Theme Vulnerable versions = 1.9.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31013 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6a066edc64f9 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

CVE-2022-4678

creationtimestamp| type| source ---|---|--- 2025-03-21 17:19:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8383...

CVE-2025-2449

creationtimestamp| type| source ---|---|--- 2025-03-17 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-146/...

GHSA-3RJF-87RF-H8M9

creationtimestamp| type| source ---|---|--- 2025-03-04 17:34:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6395...

GHSA-878M-3G6Q-594Q

creationtimestamp| type| source ---|---|--- 2025-02-25 15:23:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5301...

CVE-2019-2019

creationtimestamp| type| source ---|---|--- 2025-02-13 22:00:06+00:00| published-proof-of-concept| Telegram/NACc5Eo4EB7Xq0dUp83B5WgZwGl5w1aAQ7nULJ6Iy2xlHAA...

CVE-2025-21676

creationtimestamp| type| source ---|---|--- 2025-01-31 12:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzy3q266u2e 2025-01-31 13:14:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3648 2025-01-31 15:23:28+00:00| seen|...

CVE-2024-46778

creationtimestamp| type| source ---|---|--- 2025-01-16 12:55:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1943...

CVE-2023-33255

creationtimestamp| type| source ---|---|--- 2025-01-15 20:54:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1858...

CVE-2024-12394

creationtimestamp| type| source ---|---|--- 2025-01-09 11:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckh75z7c22 2025-01-09 11:59:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113798282266042322 2025-01-09 12:15:20+00:00| seen|...

WordPress Jeg Elementor Kit Plugin <= 2.6.9 is vulnerable to Cross Site Scripting (XSS)

Software Jeg Elementor Kit Type Plugin Vulnerable versions = 2.6.9 Fixed in 2.6.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10308 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7709d157b72c Credits zer0gh0st Required...

WordPress Rescue Shortcodes Plugin <= 2.9 is vulnerable to Cross Site Scripting (XSS)

Software Rescue Shortcodes Type Plugin Vulnerable versions = 2.9 Fixed in 3.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11199 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9032d40ace0e Credits Peter Thaleikis Required...

WordPress Fence URL Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Fence URL Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53733 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 30a5e37e5481 Credits SOPROBRO Required privilege...

CVE-2024-11517

creationtimestamp| type| source ---|---|--- 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1597/...

WordPress Theme Builder For Elementor Plugin <= 1.2.2 is vulnerable to Broken Access Control

Software Theme Builder For Elementor Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Access Control CVE CVE-2024-10782 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 266b574a3c97...

WordPress LSX Tour Operator Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)

Software LSX Tour Operator Type Plugin Vulnerable versions = 1.4.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9851 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ff9d84e2d494 Credits Francesco Carlucci...

WordPress Ortto Plugin <= 1.0.19 is vulnerable to Cross Site Scripting (XSS)

Software Ortto Type Plugin Vulnerable versions = 1.0.19 Fixed in 1.0.21 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52482 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4b5d486dfe4b Credits Le Ngoc Anh Required privilege...

WordPress Save as PDF plugin by Pdfcrowd Plugin <= 4.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Save as PDF plugin by Pdfcrowd Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10891 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bc2c8b0bae5b Credits Peter...

WordPress Jobify - Job Board WordPress Theme Theme <= 4.2.3 is vulnerable to Broken Access Control

Software Jobify - Job Board WordPress Theme Type Theme Vulnerable versions = 4.2.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-52480 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f5223c9ba0e9 Credits Ananda Dhakal...

WordPress Booster for WooCommerce Plugin <= 7.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.2.3 Fixed in 7.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9239 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c5b658709ea3 Credits vgo0...