WordPress DuoGeek Blocks Plugin 0.1.1 is vulnerable to Cross Site Scripting (XSS)

Software DuoGeek Blocks Type Plugin Vulnerable versions 0.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51868 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f1b54faa196d Credits Gab Required privilege Contributor Publishe...

WordPress Web Stories Widgets For Elementor Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Web Stories Widgets For Elementor Type Plugin Vulnerable versions = 1.1 Fixed in 1.1.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52354 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3d854e2af032 Credits theviper17 Required...

WordPress Combo WP Rewrite Slugs Plugin <= 1.0 is vulnerable to Settings Change

Software Combo WP Rewrite Slugs Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-51817 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e956307de9d1 Credits Mika Required privilege Subscrib...

WordPress Websand Subscription Form Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Websand Subscription Form Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51923 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9a8e64378983 Credits SOPROBRO Required privilege...

WordPress Forms Plugin <= 2.8.0 is vulnerable to Arbitrary File Upload

Software Forms Type Plugin Vulnerable versions = 2.8.0 Fixed in 2.8.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-51791 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 0594a374dbac Credits stealthcopter Required privilege Unauthenticated...

WordPress Landing Page Cat Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)

Software Landing Page Cat Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9226 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a9da6507309 Credits vgo0 Required...

WordPress Luzuk Testimonials Plugin <= 0.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Luzuk Testimonials Type Plugin Vulnerable versions = 0.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51872 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e42d6eaf9f4a Credits SOPROBRO Required privilege Contribut...

WordPress Luzuk Team Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Luzuk Team Type Plugin Vulnerable versions = 0.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51871 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e6aea35011f1 Credits SOPROBRO Required privilege Contributor...

WordPress Bitcoin Payments Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Bitcoin Payments Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51826 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0a52098c8793 Credits SOPROBRO Required privilege Contributor...

WordPress Luzuk Slider Plugin <= 0.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Luzuk Slider Type Plugin Vulnerable versions = 0.1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51834 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d9444f06a954 Credits SOPROBRO Required privilege Contributor...

WordPress Hola Free Video Player Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)

Software Hola Free Video Player Type Plugin Vulnerable versions = 1.3.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51854 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 95081eab926c Credits SOPROBRO Required privilege...

WordPress Mobile Kiosk Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Mobile Kiosk Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51829 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7924bf5d9424 Credits SOPROBRO Required privilege Contributor...

WordPress AchillesTheme-shortcodes Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)

Software AchillesTheme-shortcodes Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51878 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ee2bc3d0bd6a Credits Gab Required privilege Contributo...

WordPress Creative Blocks Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Creative Blocks Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51822 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 92ca1e6db3e1 Credits Gab Required privilege Contributor...

WordPress Custom URL Shortener Plugin <= 0.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Custom URL Shortener Type Plugin Vulnerable versions = 0.3.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51930 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 721373a7389e Credits SOPROBRO Required privilege...

WordPress Redirecter Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Redirecter Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51855 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dfdafabcd66b Credits SOPROBRO Required privilege Contributor Publish...

WordPress SV Forms Plugin <= 2.0.05 is vulnerable to Cross Site Scripting (XSS)

Software SV Forms Type Plugin Vulnerable versions = 2.0.05 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51877 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7bf14e1f9476 Credits Joshua Chan Required privilege Contributor...

WordPress Map Store Locator Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Map Store Locator Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51920 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3bad7bf99174 Credits SOPROBRO Required privilege Contributo...

WordPress Topbar ID for Elementor Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Topbar ID for Elementor Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51894 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1c12d2eed8fd Credits Gab Required privilege Contribut...

WordPress Tigris Flexplatform Plugin <=1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Tigris Flexplatform Type Plugin Vulnerable versions =1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51819 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6c1287ae96d2 Credits Joshua Chan Required privilege...