PT-2024-31919 · WordPress · Elementor Website Builder

Name of the Vulnerable Software and Affected Versions: Elementor Website Builder plugin for WordPress versions up to, and including, 3.21.4 Description: The Elementor Website Builder plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the hover animation parameter due ...

PT-2024-13471 · Miniorange · Miniorange Wordpress Social Login/Register

Name of the Vulnerable Software and Affected Versions: miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn versions n/a through 7.6.6 Description: The issue is related to improper privilege management, allowing privilege escalation. This can lead to unauthorized...

PT-2024-29734 · Kadence Wp · Gutenberg Blocks With Ai By Kadence Wp

Name of the Vulnerable Software and Affected Versions: The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress versions up to, and including, 3.2.37 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes i...

PT-2024-22825 · WordPress · Magical Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Magical Addons For Elementor plugin versions up to, and including, 1.1.37 Description: The issue is related to Stored Cross-Site Scripting via the plugin's text effect widget due to insufficient input sanitization and output escaping on...

PT-2024-31131 · Unknown · Mr Digital Simple Image Popup

Name of the Vulnerable Software and Affected Versions: Mr Digital Simple Image Popup versions n/a through 2.4.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can injec...

PT-2024-25321 · 8Theme · 8Theme Xstore Core

Name of the Vulnerable Software and Affected Versions: 8theme XStore Core versions n/a through 5.3.5 Description: The issue is related to the deserialization of untrusted data in 8theme XStore Core. This can potentially lead to security risks. No information is provided about the estimated number...

PT-2024-25311 · Wzone · Wzone

Name of the Vulnerable Software and Affected Versions: WZone versions n/a through 14.0.10 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The estimated number of...

PT-2024-25448 · Unknown · Satrya Smart Recent Posts Widget

Name of the Vulnerable Software and Affected Versions: Satrya Smart Recent Posts Widget versions 1.0.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

PT-2024-14133 · WordPress · Checkout Mestres Wp

Name of the Vulnerable Software and Affected Versions: Checkout Mestres WP versions 7.1.9.7 and earlier Description: The issue is related to an Improper Authentication vulnerability that allows Privilege Escalation in the affected software. Recommendations: For versions 7.1.9.7 and earlier, updat...

PT-2024-24857 · Elementor · The Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Pack Elementor addons versions 2.0.8.3 and earlier Description: A Cross-Site Request Forgery CSRF issue in The Pack Elementor addons allows for Cross-Site Scripting XSS. This means an attacker could potentially trick a user into performin...

PT-2024-27475 · WordPress · Geodirectory

Name of the Vulnerable Software and Affected Versions: The GeoDirectory – WordPress Business Directory Plugin versions up to, and including, 2.3.48 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'gd single tabs' shortcode due to insufficient input sanitization a...

PT-2024-27896 · WordPress · The Essential Blocks – Page Builder Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress versions up to, and including, 4.5.9 Description: The issue is related to Stored Cross-Site Scripting via the plugin's "Social Icons" block due to...

PT-2024-12560 · Unknown · Ninja Forms Contact Form

Name of the Vulnerable Software and Affected Versions: Ninja Forms Contact Form versions 3.6.24 and earlier Description: The issue is related to an Improper Input Validation vulnerability in the Ninja Forms Contact Form. This vulnerability affects the specified versions of the Ninja Forms Contact...

PT-2024-20663 · WordPress · Powerpack Addons For Elementor

Name of the Vulnerable Software and Affected Versions: PowerPack Addons for Elementor plugin for WordPress versions up to and including 2.7.18 Description: The issue is related to Stored Cross-Site Scripting via the Twitter Tweet widget due to insufficient input sanitization and output escaping...

PT-2024-5662 · Korenix · Korenix Jetport +1

Name of the Vulnerable Software and Affected Versions: Korenix JetPort versions 1.2 and earlier Korenix JetPort 5601v3 versions through 1.2 Description: The issue is related to weaknesses in the authentication procedure of the Korenix JetPort serial device server. It may allow a remote attacker t...

PT-2024-23364 · Unknown · Collectchat

Name of the Vulnerable Software and Affected Versions: Collectchat versions through 2.4.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS, where an attacker can inject malicious script...

PT-2024-23423 · WordPress · Wp Responsive Tabs Horizontal Vertical/Accordion Tabs

Name of the Vulnerable Software and Affected Versions: WP Responsive Tabs horizontal vertical and accordion Tabs versions 1.1.17 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows f...

PT-2024-23271 · Wpdeveloper · Wpdeveloper Betterdocs

Name of the Vulnerable Software and Affected Versions: WPDeveloper BetterDocs versions 3.3.3 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security risks, as deserializing untrusted data can allow an attacker to execute...

PT-2024-23229 · Unknown · Bold Page Builder

Name of the Vulnerable Software and Affected Versions: Bold Page Builder versions through 4.7.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2024-23013 · WordPress · Dracula Dark Mode

Name of the Vulnerable Software and Affected Versions: Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress versions 1.0.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS...