WordPress Ultimate Addons for Elementor Plugin <= 1.36.31 is vulnerable to Privilege Escalation

Software Ultimate Addons for Elementor Type Plugin Vulnerable versions = 1.36.31 Fixed in 1.36.32 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2024-37455 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID accfb8b8dfc3 Credits Ngô...

WordPress Ultimate Blocks – Gutenberg Blocks Plugin Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Blocks – Gutenberg Blocks Plugin Type Plugin Vulnerable versions = 3.1.9 Fixed in 3.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37457 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 909aaa17d385 Credits 4rCanJ0x!...

WordPress Ultimate Bootstrap Elements for Elementor Plugin <= 1.4.2 is vulnerable to Local File Inclusion

Software Ultimate Bootstrap Elements for Elementor Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-37462 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a8f9d8a5eba6 Credits João...

CVE-2024-5662

CVE-2024-5662 affects the Ultimate Post Kit Addons For Elementor for WordPress. A Stored XSS vulnerability exists in the Social Count (Static) widget via the url parameter across all versions up to 3.11.7 due to insufficient input sanitization and output escaping. Exploitation requires authentica...

WordPress plugin Ultimate Post Kit Addons For Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Ultimate Post Kit – Addons For Elementor Plugin <= 3.11.7 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Post Kit – Addons For Elementor Type Plugin Vulnerable versions = 3.11.7 Fixed in 3.11.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5662 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID eaf9b9b3c2a5 Credi...

Malicious code in Ultimate.Wpf.Toolkit (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2138 Malicious code in down_load_ebook_aws_amazon_web_service_the_ultimate_guide_to_amaz_by_george_prestonship_u1mt7 (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress plugin Ultimate Blocks security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Ultimate Blocks – WordPress Blocks Plugin plugin <= 3.0.8 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Rafshanzani Suhada in WordPress Plugin Ultimate Blocks versions = 3.1.0...

WordPress Ultimate Blocks – Gutenberg Blocks Plugin Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Blocks – Gutenberg Blocks Plugin Type Plugin Vulnerable versions = 3.1.0 Fixed in 3.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6692 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0c6c4059359d Credit...

CVE-2024-4821

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sulightbox shortcode in all versions up to, and including, 7.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

WordPress Shortcodes Ultimate plugin <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via sulightbox Shortcode vulnerability discovered by Richard Telleng stueotue in WordPress Plugin Shortcodes Ultimate versions = 7.1.6...

WordPress Shortcodes Ultimate Plugin <= 7.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Shortcodes Ultimate Type Plugin Vulnerable versions = 7.1.6 Fixed in 7.1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4821 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7c78a726473d Credits Richard Telleng...

CVE-2023-49822

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10...

CVE-2023-49822 WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10...

CVE-2023-49822 WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10...

WordPress Elementor Header & Footer Builder plugin <= 1.6.26 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.26...

WordPress WP Ultimate Post Grid plugin <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Krzysztof Zając in WordPress Plugin WP Ultimate Post Grid versions = 3.9.1...

WordPress WP Ultimate Post Grid Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Ultimate Post Grid Type Plugin Vulnerable versions = 3.9.1 Fixed in 3.9.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4043 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 33040158eb31 Credits Krzysztof Zając...