WordPress Fintelligence Calculator Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Fintelligence Calculator Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-53731 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5d294aa2e0bc Credits SOPROBRO Required privilege...

WordPress Custom Shortcode Sidebars Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Custom Shortcode Sidebars Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53736 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID f06eb016030e Credits SOPROBRO...

WordPress Rescue Shortcodes Plugin <= 2.9 is vulnerable to Cross Site Scripting (XSS)

Software Rescue Shortcodes Type Plugin Vulnerable versions = 2.9 Fixed in 3.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11199 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9032d40ace0e Credits Peter Thaleikis Required...

WordPress WordPress Brute Force Protection – Stop Brute Force Attacks Plugin <= 2.2.6 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Brute Force Protection – Stop Brute Force Attacks Type Plugin Vulnerable versions = 2.2.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10869 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...

WordPress Google Plus Share and +1 Button Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Google Plus Share and +1 Button Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53723 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 1172091fa78a Credits SOPROBR...

WordPress IceStats Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software IceStats Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53724 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 228e60432718 Credits SOPROBRO Required privilege...

WordPress Product Table for WooCommerce Plugin <= 3.5.1 is vulnerable to Sensitive Data Exposure

Software Product Table for WooCommerce Type Plugin Vulnerable versions = 3.5.1 Fixed in 3.5.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-10813 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 157ba908784e Credits Nathan...

WordPress LA-Studio Element Kit for Elementor Plugin <= 1.4.2 is vulnerable to Local File Inclusion

Software LA-Studio Element Kit for Elementor Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-10873 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID b849859ee751 Credits WordFence Required...

WordPress HIPAAtizer Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Software HIPAAtizer Type Plugin Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11332 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 752388593715 Credits SOPROBRO Required privilege...

WordPress RealtyCandy IDX Broker Extended Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software RealtyCandy IDX Broker Extended Type Plugin Vulnerable versions = 1.5.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53726 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 24b8b3d7db9b Credits...

WordPress Continue Shopping From Cart Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Continue Shopping From Cart Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53714 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 999b8039b4c7 Credits SOPROBRO...

WordPress Post Hits Counter Plugin <= 2.8.23 is vulnerable to Cross Site Request Forgery (CSRF)

Software Post Hits Counter Type Plugin Vulnerable versions = 2.8.23 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53725 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1adf13e9aa62 Credits SOPROBRO...

PT-2024-34515 · Kia · Kia Seltos

Name of the Vulnerable Software and Affected Versions: KIA Seltos vehicle instrument cluster version 1.0 Description: An issue in the KIA Seltos vehicle instrument cluster allows attackers to control or disrupt CAN communication between the instrument cluster and CAN bus. The findings are dispute...

WordPress Quotes llama Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Quotes llama Type Plugin Vulnerable versions = 3.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10874 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7f9b6d2f50cd Credits Peter Thaleikis Required...

WordPress WPFunnels Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)

Software WPFunnels Type Plugin Vulnerable versions = 3.5.5 Fixed in 3.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10792 Patch priority Medium CVSS severity Medium 7.1 Developer WPFunnels Team PSID b1c17399226b Credits Nathan calysteon Require...

WordPress Product Designer Plugin <= 1.0.35 is vulnerable to Cross Site Scripting (XSS)

Software Product Designer Type Plugin Vulnerable versions = 1.0.35 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9111 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 972d8d8742f9 Credits Francesco Carlucci...

WordPress Formidable Forms Plugin < 6.14.1 is vulnerable to Cross Site Scripting (XSS)

Software Formidable Forms Type Plugin Vulnerable versions 6.14.1 Fixed in 6.14.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9768 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 929c3f675f30 Credits Krugov Artyom Required...

WordPress CM Table Of Contents – WordPress TOC Plugin Plugin < 1.2.4 is vulnerable to Cross Site Scripting (XSS)

Software CM Table Of Contents – WordPress TOC Plugin Type Plugin Vulnerable versions 1.2.4 Fixed in 1.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5029 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7d80877428bb...

WordPress Media Library Tools Plugin < 1.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Media Library Tools Type Plugin Vulnerable versions 1.5.0 Fixed in 1.5.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10482 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 79520509f6a4 Credits Bob Matyas Required...

WordPress System Dashboard Plugin < 2.8.15 is vulnerable to Cross Site Scripting (XSS)

Software System Dashboard Type Plugin Vulnerable versions 2.8.15 Fixed in 2.8.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11107 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 948953d35f1c Credits Dogus Demirkiran...