WordPress Visual Portfolio, Photo Gallery & Post Grid Plugin <= 3.3.2 is vulnerable to Cross Site Scripting (XSS)

Software Visual Portfolio, Photo Gallery & Post Grid Type Plugin Vulnerable versions = 3.3.2 Fixed in 3.3.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4363 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f5a76513a112...

WordPress Borderless Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Borderless Type Plugin Vulnerable versions = 1.5.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34757 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6690481ece90 Credits Khalid Yusuf Required privilege Contributor...

WordPress Landing Page Builder Plugin <= 1.5.1.8 is vulnerable to Cross Site Scripting (XSS)

Software Landing Page Builder Type Plugin Vulnerable versions = 1.5.1.8 Fixed in 1.5.1.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34752 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d84e812a046a Credits Dimas Maulana Required...

TYPO3 安全漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 CMS that originates from uncontrolled resource consumption in ShowImageController. The affected versions are as follows: 9.0.0 to 9.5.47; 10.0.0 t...

WordPress plugin Simple Basic Contact Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

WordPress WP SMS Plugin <= 6.5.1 is vulnerable to Cross Site Scripting (XSS)

Software WP SMS Type Plugin Vulnerable versions = 6.5.1 Fixed in 6.5.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34811 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1c1c64a4be78 Credits Dhabaleshwar Das Required privilege Administrat...

PT-2024-33051 · Unknown · School Erp Pro+Responsive

Name of the Vulnerable Software and Affected Versions: School ERP Pro+Responsive version 1.0 Description: The issue allows SQL injection through the "/SchoolERP/office admin/" index in parameters such as groups id, examname, classes id, es voucherid, es class, etc. This could enable a remote...

WordPress Graphina Plugin <= 1.8.9 is vulnerable to Cross Site Scripting (XSS)

Software Graphina Type Plugin Vulnerable versions = 1.8.9 Fixed in 1.8.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4574 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 937e343a9f16 Credits stealthcopter Required privile...

PT-2024-23619 · Unknown · Vehicle Management System

Name of the Vulnerable Software and Affected Versions: Vehicle Management System version 7.31.0.3 20230412 Description: The issue allows an attacker to escalate privileges via the login.html component. Recommendations: For Vehicle Management System version 7.31.0.3 20230412, consider restricting...

WordPress Academy LMS Plugin <= 1.9.25 is vulnerable to Sensitive Data Exposure

Software Academy LMS Type Plugin Vulnerable versions = 1.9.25 Fixed in 1.9.26 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-35171 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d7ce74e58435 Credits Peng Zhou Required privilege...

WordPress Falang multilanguage Plugin <= 1.3.49 is vulnerable to Cross Site Scripting (XSS)

Software Falang multilanguage Type Plugin Vulnerable versions = 1.3.49 Fixed in 1.3.50 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4417 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f66544b43c9b Credits Benedictus Jovan...

WordPress EmbedPress Plugin <= 3.9.16 is vulnerable to Cross Site Scripting (XSS)

Software EmbedPress Type Plugin Vulnerable versions = 3.9.16 Fixed in 3.9.17 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4316 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 866c57fd8830 Credits stealthcopter Required...

WordPress Extra Theme <= 4.25.0 is vulnerable to Cross Site Scripting (XSS)

Software Extra Type Theme Vulnerable versions = 4.25.0 Fixed in 4.25.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4490 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bcfad4f5bb49 Credits Webbernaut Required privilege...

WordPress White Label CMS Plugin <= 2.7.3 is vulnerable to Broken Access Control

Software White Label CMS Type Plugin Vulnerable versions = 2.7.3 Fixed in 2.7.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-4280 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a368614cfe17 Credits Krzysztof Zając Required...

WordPress Essential Addons for Elementor Plugin <= 5.9.19 is vulnerable to Cross Site Scripting (XSS)

Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.9.19 Fixed in 5.9.20 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4275 Patch priority Low CVSS severity Low 6.5 Developer WPDeveloper PSID cf3506099f76 Credits Ngô Thiên A...

WordPress LearnPress Plugin <= 4.2.6.5 is vulnerable to Cross Site Scripting (XSS)

Software LearnPress Type Plugin Vulnerable versions = 4.2.6.5 Fixed in 4.2.6.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4277 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3ad5ee25dcd1 Credits stealthcopter Required...

WordPress Orders Tracking for WooCommerce Plugin <= 1.2.10 is vulnerable to Broken Access Control

Software Orders Tracking for WooCommerce Type Plugin Vulnerable versions = 1.2.10 Fixed in 1.2.11 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4039 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID da05ab03734d Credits...

WordPress LearnPress Plugin <= 4.2.6.5 is vulnerable to Broken Access Control

Software LearnPress Type Plugin Vulnerable versions = 4.2.6.5 Fixed in 4.2.6.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4444 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5f824fed280f Credits 1337Wannabe Required privilege...

WordPress Hotel Booking Lite Plugin <= 4.11.1 is vulnerable to PHP Object Injection

Software Hotel Booking Lite Type Plugin Vulnerable versions = 4.11.1 Fixed in 4.11.2 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-4413 Patch priority High CVSS severity High 9 Developer Claim ownership PSID f9d7cef7773f Credits Trinh Vu Sonicrrrr Required privilege...

WordPress iPages Flipbook Plugin <= 1.5.1 is vulnerable to Broken Access Control

Software iPages Flipbook Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4744 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID bb5d1d1247cb Credits Dhabaleshwar Das Required...