WordPress Emoji Shortcode Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Emoji Shortcode Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51609 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6ec03d2b4a66 Credits SOPROBRO Required privilege Contributor...

WordPress Classy Addons for Elementor Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)

Software Classy Addons for Elementor Type Plugin Vulnerable versions = 1.2.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50553 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e89f889c481e Credits Gab Required privilege...

WordPress Quran Shortcode Plugin <= 1.5 is vulnerable to SQL Injection

Software Quran Shortcode Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51625 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID c3f04d230d13 Credits LVT-tholv2k Required privilege Contributor Published ...

WordPress Simple Job Manager Plugin <= 1.1 is vulnerable to SQL Injection

Software Simple Job Manager Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51602 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a7e27e792959 Credits LVT-tholv2k Required privilege Contributor Publish...

WordPress RSVP ME Plugin <= 1.9.9 is vulnerable to SQL Injection

Software RSVP ME Type Plugin Vulnerable versions = 1.9.9 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50544 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 1e22cf9c262a Credits LVT-tholv2k Required privilege Contributor Published 31...

WordPress MPG Plugin <= 4.0.1 is vulnerable to Broken Access Control

Software MPG Type Plugin Vulnerable versions = 4.0.1 Fixed in 4.0.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-7424 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 61dc998feee8 Credits Rafshanzani Suhada Required privilege...

WordPress Download-Mirror-Counter Plugin <= 1.1 is vulnerable to SQL Injection

Software Download-Mirror-Counter Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51621 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID b6969fba593d Credits LVT-tholv2k Required privilege Contributor...

WordPress Kento Ads Rotator Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Kento Ads Rotator Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51583 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0d17bd84097b Credits SOPROBRO Required privilege Contributor...

WordPress Themedy Toolbox Plugin <= 1.0.16 is vulnerable to Cross Site Scripting (XSS)

Software Themedy Toolbox Type Plugin Vulnerable versions = 1.0.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50547 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 016e04512162 Credits theviper17 Required privilege Contribut...

WordPress Audio Comparison Lite Plugin <= 3.4 is vulnerable to Cross Site Scripting (XSS)

Software Audio Comparison Lite Type Plugin Vulnerable versions = 3.4 Fixed in 3.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51627 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0a5a84c2cb69 Credits SOPROBRO Required privilege...

WordPress bpmn.io Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software bpmn.io Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51577 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9aca1d801a93 Credits SOPROBRO Required privilege Contributor Published ...

WordPress AtomChat Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)

Software AtomChat Type Plugin Vulnerable versions = 1.1.5 Fixed in 1.1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10232 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 646d1a105951 Credits Peter Thaleikis Required...

LevelOne WBR-6012 Web Application buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-1997 LevelOne WBR-6012 Web Application buffer overflow vulnerability October 30, 2024 CVE Number CVE-2024-28052 SUMMARY The WBR-6012 is a wireless SOHO router. It is a low-cost device which functions as an internet gateway for homes and small offices while...

WordPress Get Quote For Woocommerce Plugin <= 1.0.0 is vulnerable to Broken Access Control

Software Get Quote For Woocommerce Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9430 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ed4687422c20 Credits stehled Required...

Xerox Printers Authenticated Remote Code Execution Vulnerability

Various Xerox printers, such as models EC80xx, AltaLink, VersaLink, and WorkCentre, suffer from an authenticated remote code execution vulnerability. ======================================================================= title: Authenticated Remote Code Execution product: Multiple Xerox printers...

WordPress Training – Courses Plugin <= 2.0.1 is vulnerable to Arbitrary File Upload

Software Training – Courses Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-50529 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID d08276d9efbf Credits stealthcopter Required privilege...

PT-2024-39629 · WordPress · Wpglobus Translate Options

Name of the Vulnerable Software and Affected Versions: WPGlobus Translate Options plugin for WordPress versions up to, and including, 2.2.0 Description: The issue is due to missing or incorrect nonce validation on the on translate options page function, making it possible for unauthenticated...

WordPress Stars SMTP Mailer Plugin <= 1.7 is vulnerable to Arbitrary File Upload

Software Stars SMTP Mailer Type Plugin Vulnerable versions = 1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-50530 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID f048023ff8ae Credits stealthcopter Required privilege Subscrib...

WordPress Stacks Mobile App Builder Plugin <= 5.2.3 is vulnerable to Arbitrary File Upload

Software Stacks Mobile App Builder Type Plugin Vulnerable versions = 5.2.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-50527 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 0f132ccd95a2 Credits stealthcopter Required privilege...

WordPress Arconix Shortcodes Plugin <= 2.1.13 is vulnerable to Cross Site Scripting (XSS)

Software Arconix Shortcodes Type Plugin Vulnerable versions = 2.1.13 Fixed in 2.1.14 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10226 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c6233411bd7c Credits Peter Thaleikis...