11816 matches found
CVE-2024-49247
Authentication Bypass Using an Alternate Path or Channel vulnerability in SK BuddyPress Better Registration better-bp-registration allows Authentication Bypass.This issue affects BuddyPress Better Registration: from n/a through = 1.6...
CVE-2024-54392
Cross-Site Request Forgery CSRF vulnerability in midoks WP微信机器人 wp-weixin-robot allows Stored XSS.This issue affects WP微信机器人: from n/a through = 5.3.5...
CVE-2024-54411
Cross-Site Request Forgery CSRF vulnerability in hosting.io WP Controller wp-management-controller allows Stored XSS.This issue affects WP Controller: from n/a through = 3.2.0...
CVE-2024-54394
Cross-Site Request Forgery CSRF vulnerability in khubbaib Mandrill WP email-form-under-post allows Stored XSS.This issue affects Mandrill WP: from n/a through = 1.0.5...
CVE-2024-54364
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spartac Feedpress Generator feedpress-generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through = 1.2.1...
CVE-2024-54410
Cross-Site Request Forgery CSRF vulnerability in eagerterrier SOPA Blackout sopa-blackout allows Stored XSS.This issue affects SOPA Blackout: from n/a through = 1.4...
CVE-2024-54425
Cross-Site Request Forgery CSRF vulnerability in LionScripts.com LionScripts: Site Maintenance & Noindex Nofollow Plugin maintenance-and-noindex-nofollow allows Stored XSS.This issue affects LionScripts: Site Maintenance & Noindex Nofollow Plugin: from n/a through = 2.1...
CVE-2024-54331
Cross-Site Request Forgery CSRF vulnerability in Micha I Plant A Tree i-plant-a-tree allows Stored XSS.This issue affects I Plant A Tree: from n/a through = 1.7.3...
CVE-2024-27196
Cross Site Scripting XSS vulnerability in Joel Starnes postMash – custom post order allows Reflected XSS.This issue affects postMash – custom post order: from n/a through 1.2.0...
CVE-2024-27955
Cross-Site Request Forgery CSRF vulnerability in WP Automatic Automatic allows Privilege Escalation.This issue affects Automatic: from n/a through 3.92.0...
CVE-2024-51656
Cross-Site Request Forgery CSRF vulnerability in litefeel Flash Show And Hide Box flash-show-and-hide-box allows Stored XSS.This issue affects Flash Show And Hide Box: from n/a through = 1.6...
CVE-2024-51818
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in radykal Fancy Product Designer fancy-product-designer.This issue affects Fancy Product Designer: from n/a through = 6.4.3...
CVE-2024-51546
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...
CVE-2024-51709
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mariandz TeleAdmin teleadmin allows Reflected XSS.This issue affects TeleAdmin: from n/a through = 1.0.0...
CVE-2024-51820
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wplsquared L Squared Hub WP l-squared-hub-wp-virtual-device allows SQL Injection.This issue affects L Squared Hub WP: from n/a through = 1.0...
CVE-2024-33549
Improper Privilege Management vulnerability in AA-Team WZone allows Privilege Escalation.This issue affects WZone: from n/a through 14.0.10...
CVE-2024-24832
Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...
CVE-2024-37486
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 3.0.5...
CVE-2024-55973
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in rnystrom TSB Occasion Editor tsb-occasion-editor allows SQL Injection.This issue affects TSB Occasion Editor: from n/a through = 1.2.1...