WordPress Bakes And Cakes Theme <= 1.2.6 is vulnerable to Broken Access Control

Software Bakes And Cakes Type Theme Vulnerable versions = 1.2.6 Fixed in 1.2.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37496 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c1a64d1962d4 Credits Dhabaleshwar Das Required...

WordPress The Post Grid Plugin <= 7.7.4 is vulnerable to Broken Access Control

Software The Post Grid Type Plugin Vulnerable versions = 7.7.4 Fixed in 7.7.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37481 Patch priority Medium CVSS severity Medium 6.5 Developer Mamunur Rashid PSID eb5b996e0113 Credits Rafie Muhammad Patchstack...

WordPress Construction Landing Page Theme <= 1.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Construction Landing Page Type Theme Vulnerable versions = 1.3.5 Fixed in 1.3.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37508 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0d4d248a463f Credits Dhabaleshw...

WordPress The Post Grid Plugin <= 7.7.4 is vulnerable to Broken Access Control

Software The Post Grid Type Plugin Vulnerable versions = 7.7.4 Fixed in 7.7.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37482 Patch priority Low CVSS severity Low 4.3 Developer Mamunur Rashid PSID cde94030335f Credits Rafie Muhammad Patchstack Requir...

WordPress Charitable Plugin <= 1.8.1.7 is vulnerable to Broken Access Control

Software Charitable Type Plugin Vulnerable versions = 1.8.1.7 Fixed in 1.8.1.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37506 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4942d8e7ca80 Credits Manab Jyoti Dowarah Required...

WordPress Table & Contact Form 7 Database – Tablesome Plugin <= 1.0.33 is vulnerable to Sensitive Data Exposure

Software Table & Contact Form 7 Database – Tablesome Type Plugin Vulnerable versions = 1.0.33 Fixed in 1.0.34 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-37498 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b592d73e1659...

WordPress Create by Mediavine Plugin <= 1.9.7 is vulnerable to Cross Site Scripting (XSS)

Software Create by Mediavine Type Plugin Vulnerable versions = 1.9.7 Fixed in 1.9.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37495 Patch priority Low CVSS severity Low 6.5 Developer Mediavine PSID 4b868863b41e Credits LVT-tholv2k Required privilege Contribut...

CBL Mariner 2.0 Security Update: c-ares / fluent-bit / grpc / nodejs (CVE-2023-31147)

The version of c-ares / fluent-bit / grpc / nodejs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-31147 advisory. - c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom a...

WordPress WebSitter Pro Plugin <= 4.0.11 is vulnerable to Backdoor

Software WebSitter Pro Type Plugin Vulnerable versions = 4.0.11 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b32be3e9bd16 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress CommandBar for WP Admin Plugin <= 1.0.7 is vulnerable to Backdoor

Software CommandBar for WP Admin Type Plugin Vulnerable versions = 1.0.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4ca3d0fa43b1 Credits Sansec.io Required privilege Unauthenticated Published 3...

WordPress YAHMAN Add-ons Plugin <= 0.9.28 is vulnerable to Backdoor

Software YAHMAN Add-ons Type Plugin Vulnerable versions = 0.9.28 Fixed in 0.9.29 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 26c7f39721f9 Credits Sansec.io Required privilege Unauthenticated Published 3 July,...

WordPress Product Customer List for WooCommerce Plugin <= 3.1.6 is vulnerable to Backdoor

Software Product Customer List for WooCommerce Type Plugin Vulnerable versions = 3.1.6 Fixed in 3.1.7 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 23316ac7b932 Credits Sansec.io Required privilege Unauthenticate...

WordPress Amelia Shortcode Extended Plugin <= 1.6 is vulnerable to Backdoor

Software Amelia Shortcode Extended Type Plugin Vulnerable versions = 1.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 6bcf0ef7322f Credits Sansec.io Required privilege Unauthenticated Published 3...

WordPress Easy Speedup by PageCDN Plugin <= 5.14 is vulnerable to Backdoor

Software Easy Speedup by PageCDN Type Plugin Vulnerable versions = 5.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 86c9276e839f Credits Sansec.io Required privilege Unauthenticated Published 3 Jul...

WordPress ShipAny Plugin <= 1.1.52 is vulnerable to Backdoor

Software ShipAny Type Plugin Vulnerable versions = 1.1.52 Fixed in 1.1.53 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3bc0ee8c1578 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Digital River Global Commerce Plugin <= 2.0.2 is vulnerable to Backdoor

Software Digital River Global Commerce Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 094cc90dcba0 Credits Sansec.io Required privilege Unauthenticated Publishe...

WordPress Contact Form 7 Multi-Step Addon Plugin <= 1.0.5 is vulnerable to Backdoor

Software Contact Form 7 Multi-Step Addon Type Plugin Vulnerable versions = 1.0.5 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8aae8a0dc1cb Credits Sansec.io Required privilege Unauthenticated...

CBL Mariner 2.0 Security Update: kata-containers (CVE-2023-41051)

The version of kata-containers installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-41051 advisory. - In a typical Virtual Machine Monitor VMM there are several components, such as boot loader, virtual...

WordPress Cost Calculator Builder Plugin <= 3.2.12 is vulnerable to Cross Site Scripting (XSS)

Software Cost Calculator Builder Type Plugin Vulnerable versions = 3.2.12 Fixed in 3.2.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6011 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 19a4b52def1d Credits Guido Iván...

WordPress sitetweet Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)

Software sitetweet Type Plugin Vulnerable versions = 0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5767 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c48f5eb9dccc Credits WPscan Required privilege...