WordPress WooCommerce Social Login Plugin <= 2.7.7 is vulnerable to Broken Authentication

Software WooCommerce Social Login Type Plugin Vulnerable versions = 2.7.7 Fixed in 2.7.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-10114 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 36095483e627 Credi...

WordPress Conversion Helper Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)

Software Conversion Helper Type Plugin Vulnerable versions = 1.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-10676 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 008d9a851e15 Credits João Pedro S Alcântara Kinorth...

WordPress Narnoo Commerce Manager Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

Software Narnoo Commerce Manager Type Plugin Vulnerable versions = 1.6.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51708 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1daa09058da0 Credits João Pedro S Alcântara...

WordPress PropertyShift Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software PropertyShift Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51762 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID eb3e1e85e252 Credits Mika Required privilege...

WordPress FriendStore for WooCommerce Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Software FriendStore for WooCommerce Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51784 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3c501c831fbd Credits João Pedro S Alcântara...

PT-2024-31835 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3900 version 1.5.1.3 Description: The issue is a post-authentication command injection problem. It occurs when the action parameter in the "cgi-bin/mainfunction.cgi" endpoint is set to setSWMGroup. This allows for potential comma...

WordPress Seo Free Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Seo Free Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51642 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 3ad2526b4888 Credits SOPROBRO Required privilege...

WordPress ThemeFuse Maintenance Mode Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software ThemeFuse Maintenance Mode Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51645 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 3f380fad532f Credits SOPROBRO...

WordPress While Loading Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software While Loading Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51635 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 43e4880a5344 Credits SOPROBRO Required privile...

WordPress Otter - Gutenberg Block Plugin <= 3.0.3 is vulnerable to Broken Access Control

Software Otter - Gutenberg Block Type Plugin Vulnerable versions = 3.0.3 Fixed in 3.0.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-51671 Patch priority Low CVSS severity Low 2.7 Developer Claim ownership PSID 1f22a7b87ab8 Credits Rafie Muhammad...

WordPress plugin Backup and Restore WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Sticky Social Bar Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Sticky Social Bar Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51631 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 1d738a190c0e Credits SOPROBRO Required...

WordPress Advanced PDF Generator Plugin <= 0.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Advanced PDF Generator Type Plugin Vulnerable versions = 0.4.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51641 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 34e686e1f7cd Credits SOPROBRO...

WordPress WP Course Manager Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Course Manager Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51658 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID fb5da93f1648 Credits SOPROBRO Required...

WordPress BetterLinks Plugin <= 2.1.7 is vulnerable to SQL Injection

Software BetterLinks Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51672 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 159a4550c364 Credits Marek Mikita Required privilege Administrator Publish...

WordPress Random Featured Post Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Random Featured Post Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51650 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 985c582f06c5 Credits SOPROBRO Require...

PT-2024-30479 · Woocommerce · Wpc Frequently Bought Together

Name of the Vulnerable Software and Affected Versions: WPC Frequently Bought Together for WooCommerce versions prior to 7.1.9 Description: The issue affects the WPC Frequently Bought Together for WooCommerce plugin due to a Missing Authorization vulnerability. This vulnerability allows for the...

PT-2024-8002 · Lb Link · Lb-Link Bl-Wr 1300H

Name of the Vulnerable Software and Affected Versions: LB-LINK BL-WR 1300H version 1.0.4 Description: The issue is related to hardcoded credentials stored in the /etc/shadow file of the LB-LINK BL-WR 1300H router. These credentials are easily guessable, which could allow a remote attacker to gain...

WordPress W3P SEO Plugin < 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software W3P SEO Type Plugin Vulnerable versions 1.8.6 Fixed in 1.8.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51684 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 58f497ee049b Credits SOPROBRO Required privilege...

WordPress Twitter @Anywhere Plus Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Twitter @Anywhere Plus Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51659 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 45e136ae6e17 Credits SOPROBRO Require...