WordPress Backup and Restore WordPress Plugin <= 1.50 is vulnerable to Cross Site Request Forgery (CSRF)

Software Backup and Restore WordPress Type Plugin Vulnerable versions = 1.50 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-43269 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bdf38dd59af4 Credits Ananda Dhakal...

WordPress weMail Plugin <= 1.14.5 is vulnerable to Cross Site Scripting (XSS)

Software weMail Type Plugin Vulnerable versions = 1.14.5 Fixed in 1.14.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43238 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6ade5dffb53e Credits LVT-tholv2k Required privilege...

WordPress DearFlip Plugin <= 2.2.55 is vulnerable to Cross Site Scripting (XSS)

Software DearFlip Type Plugin Vulnerable versions = 2.2.55 Fixed in 2.2.56 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b8b20eae5d21 Credits m3ez Required...

WordPress Ultimate Membership Pro Plugin <= 12.7 is vulnerable to Privilege Escalation

Software Ultimate Membership Pro Type Plugin Vulnerable versions = 12.7 Fixed in 12.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-43240 Patch priority High CVSS severity High 9.4 Developer Claim ownership PSID cfa9ba3d1675 Credits...

WordPress Visual Composer Starter Theme <= 3.3 is vulnerable to Cross Site Scripting (XSS)

Software Visual Composer Starter Type Theme Vulnerable versions = 3.3 Fixed in 3.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43263 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ce7f81ff359f Credits stealthcopter Required privilege...

WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.9 is vulnerable to Cross Site Scripting (XSS)

Software MailChimp Subscribe Forms Type Plugin Vulnerable versions = 4.0.9.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43211 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b6921b6bb1b6 Credits Steven Julian Required...

WordPress Persian WooCommerce Plugin <= 7.1.6 is vulnerable to Broken Access Control

Software Persian WooCommerce Type Plugin Vulnerable versions = 7.1.6 Fixed in 9.0.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43219 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 2fdf96331252 Credits Rafie Muhammad Patchstack...

WordPress Kodex Posts likes Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Kodex Posts likes Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43217 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cf6b6f9c8273 Credits Dmitriy Prokhorov Required...

WordPress GiveWP Plugin <= 3.14.1 is vulnerable to PHP Object Injection

Software GiveWP Type Plugin Vulnerable versions = 3.14.1 Fixed in 3.14.2 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-37099 Patch priority High CVSS severity High 10 Developer Liquid Web / StellarWP PSID 44652f09d965 Credits LVT-tholv2k Required privilege...

WordPress JetGridBuilder Plugin <= 1.1.2 is vulnerable to Local File Inclusion

Software JetGridBuilder Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-43221 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID be769930489f Credits João Pedro S Alcântara Kinorth Required...

WordPress Shared Files Plugin <= 1.7.28 is vulnerable to Sensitive Data Exposure

Software Shared Files Type Plugin Vulnerable versions = 1.7.28 Fixed in 1.7.29 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2024-43230 Patch priority Low CVSS severity Low 5.3 Developer Tammersoft PSID 9e141e472eac Credits Abdi Pranata Required privile...

WordPress Social Slider Feed Plugin <= 2.2.2 is vulnerable to Broken Access Control

Software Social Slider Feed Type Plugin Vulnerable versions = 2.2.2 Fixed in 2.2.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43215 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID eebbacd9eb23 Credits Joshua Chan Required...

WordPress affiliate-toolkit Plugin <= 3.5.5 is vulnerable to Sensitive Data Exposure

Software affiliate-toolkit Type Plugin Vulnerable versions = 3.5.5 Fixed in 3.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6562 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5b7ee2241ccc Credits stealthcopter Required...

WordPress Element Pack Elementor Addons Plugin <= 5.7.6 is vulnerable to Cross Site Scripting (XSS)

Software Element Pack Elementor Addons Type Plugin Vulnerable versions = 5.7.6 Fixed in 5.7.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4360 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b1a260751a26 Credits Ngô Thiên ...

WordPress No Update Nag Plugin <= 1.4.12 is vulnerable to Sensitive Data Exposure

Software No Update Nag Type Plugin Vulnerable versions = 1.4.12 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-7412 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ac9e40d53a9f Credits stealthcopter Required...

WordPress WP Dashboard Notes Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software WP Dashboard Notes Type Plugin Vulnerable versions = 1.0.11 Fixed in 1.0.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43226 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 853d82c04c96 Credits justakazh Required privileg...

WordPress BSK Forms Blacklist Plugin <= 3.8 is vulnerable to Cross Site Scripting (XSS)

Software BSK Forms Blacklist Type Plugin Vulnerable versions = 3.8 Fixed in 3.8.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43233 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 39a05d2b3c1d Credits LVT-tholv2k Required privilege...

WordPress LearnPress Plugin <= 4.2.6.9.3 is vulnerable to SQL Injection

Software LearnPress Type Plugin Vulnerable versions = 4.2.6.9.3 Fixed in 4.2.6.9.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-7548 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 65b855bf9a50 Credits Lucio Sá Required privilege Contributor Publish...

WordPress FooBox Image Lightbox Plugin <= 2.7.28 is vulnerable to Cross Site Scripting (XSS)

Software FooBox Image Lightbox Type Plugin Vulnerable versions = 2.7.28 Fixed in 2.7.32 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5668 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 34ccb97b63f3 Credits Webbernaut...

WordPress Amelia Plugin <= 1.2 is vulnerable to Sensitive Data Exposure

Software Amelia Type Plugin Vulnerable versions = 1.2 Fixed in 1.2.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6552 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 963ab0b19e24 Credits stealthcopter Required privilege...