WordPress Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy Plugin <= 2.1.1 is vulnerable to Arbitrary Content Deletion

Software Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.1.2 OWASP Top 10 A1: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2024-32724 Patch priority High CVSS severity High 7.5 Developer Claim ownership PS...

WordPress The Pack Elementor addons Plugin <= 2.0.8.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software The Pack Elementor addons Type Plugin Vulnerable versions = 2.0.8.3 Fixed in 2.0.8.4 OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-32785 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID ee4b9205bc32 Credits Le Ngoc Anh...

WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.6.1 is vulnerable to Broken Access Control

Software Advanced Local Pickup for WooCommerce Type Plugin Vulnerable versions = 1.6.1 Fixed in 1.6.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32814 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 50d614c32937 Credits...

WordPress Integrate Google Drive Plugin <= 1.3.8 is vulnerable to Broken Access Control

Software Integrate Google Drive Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.91 OWASP Top 10 A4: Insecure Design Classification Broken Access Control CVE CVE-2024-32949 Patch priority Medium CVSS severity Medium 8.3 Developer Claim ownership PSID ccf771b656bb Credits Steven Julian Require...

WordPress Royal Elementor Kit Theme <= 1.0.116 is vulnerable to Cross Site Request Forgery (CSRF)

Software Royal Elementor Kit Type Theme Vulnerable versions = 1.0.116 Fixed in 1.0.117 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32773 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4da5c371e0b8 Credits Dhabaleshwar...

WordPress Post Grid and Gutenberg Blocks Plugin <= 2.2.78 is vulnerable to Sensitive Data Exposure

Software Post Grid and Gutenberg Blocks Type Plugin Vulnerable versions = 2.2.78 Fixed in 2.2.79 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-32816 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 4274dff100bf Credits Peng Zho...

WordPress Poll Maker Plugin <= 5.1.8 is vulnerable to Cross Site Scripting (XSS)

Software Poll Maker Type Plugin Vulnerable versions = 5.1.8 Fixed in 5.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3600 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bd489978d30b Credits Krzysztof Zając Require...

WordPress LoginPress Pro Plugin < 3.0.0 is vulnerable to Bypass Vulnerability

Software LoginPress Pro Type Plugin Vulnerable versions 3.0.0 Fixed in 3.0.0 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2024-32676 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c97f3e50718a Credits Dave Jong Patchstack Required...

WordPress TrackShip for WooCommerce Plugin <= 1.7.5 is vulnerable to Broken Access Control

Software TrackShip for WooCommerce Type Plugin Vulnerable versions = 1.7.5 Fixed in 1.7.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32678 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ba4fb93f7ec5 Credits Dhabaleshwar Das...

WordPress EleForms Plugin <= 2.9.9.7 is vulnerable to Broken Access Control

Software EleForms Type Plugin Vulnerable versions = 2.9.9.7 Fixed in 2.9.9.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2043 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c63d3bfd169d Credits Francesco Carlucci Required...

WordPress Popup Anything Plugin <= 2.8 is vulnerable to Broken Access Control

Software Popup Anything Type Plugin Vulnerable versions = 2.8 Fixed in 2.8.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32601 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 740d15898275 Credits Steven Julian Required privilege...

WordPress Flash Video Player Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Flash Video Player Type Plugin Vulnerable versions = 5.0.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32537 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 7ec38f6bbf4a Credits Dimas Maulana...

WordPress Product Feed PRO for WooCommerce Plugin <= 13.3.1 is vulnerable to Sensitive Data Exposure

Software Product Feed PRO for WooCommerce Type Plugin Vulnerable versions = 13.3.1 Fixed in 13.3.2 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2024-32513 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 20d6ccb380e3 Credits...

WordPress Asgaros Forum Plugin <= 2.8.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Asgaros Forum Type Plugin Vulnerable versions = 2.8.0 Fixed in 2.9.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32440 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4d6dad870cc9 Credits Ananda Dhakal...

WordPress Legal Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Legal Pages Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32451 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4f155bb44624 Credits Dhabaleshwar Das Requir...

WordPress TOP Table Of Contents Plugin <= 1.3.15 is vulnerable to Cross Site Request Forgery (CSRF)

Software TOP Table Of Contents Type Plugin Vulnerable versions = 1.3.15 Fixed in 1.3.16 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32110 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b11059e9c542 Credits Dhabaleshwa...

WordPress Digital Publications by Supsystic Plugin <= 1.7.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Digital Publications by Supsystic Type Plugin Vulnerable versions = 1.7.7 Fixed in 1.7.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32089 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 081e14f200e1 Credits...

WordPress Event Manager for WooCommerce Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Event Manager for WooCommerce Type Plugin Vulnerable versions = 4.1.2 Fixed in 4.1.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32110 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d7bf2c59ce4e Credits...

WordPress Sangar Slider Plugin <= 1.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Sangar Slider Type Plugin Vulnerable versions = 1.3.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32091 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f6bd74e66310 Credits Khalid Yusuf Required...

WordPress Extra Product Options Builder for WooCommerce Plugin <= 1.2.104 is vulnerable to Cross Site Request Forgery (CSRF)

Software Extra Product Options Builder for WooCommerce Type Plugin Vulnerable versions = 1.2.104 Fixed in 1.2.105 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31940 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...