WordPress LearnPress Plugin <= 4.2.6.5 is vulnerable to Broken Access Control

Software LearnPress Type Plugin Vulnerable versions = 4.2.6.5 Fixed in 4.2.6.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4444 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5f824fed280f Credits 1337Wannabe Required privilege...

WordPress Hotel Booking Lite Plugin <= 4.11.1 is vulnerable to PHP Object Injection

Software Hotel Booking Lite Type Plugin Vulnerable versions = 4.11.1 Fixed in 4.11.2 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-4413 Patch priority High CVSS severity High 9 Developer Claim ownership PSID f9d7cef7773f Credits Trinh Vu Sonicrrrr Required privilege...

WordPress iPages Flipbook Plugin <= 1.5.1 is vulnerable to Broken Access Control

Software iPages Flipbook Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4744 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID bb5d1d1247cb Credits Dhabaleshwar Das Required...

WordPress Serial Numbers for WooCommerce – License Manager Plugin <= 2.1.0 is vulnerable to Broken Access Control

Software Serial Numbers for WooCommerce – License Manager Type Plugin Vulnerable versions = 2.1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35173 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID bf9d2a7b076f Credit...

thelounge may publicly disclose of all usernames/idents via port 113

Per RFC 1413, The unique identifying tuple includes not only the ports, but also the both addresses. Without the addresses, the information becomes both non-unique and public: - If multiple connections happen to use the same local port number which is possible if the addresses differ, the usernam...

WordPress Porto Theme <= 7.1.0 is vulnerable to Local File Inclusion

Software Porto Type Theme Vulnerable versions = 7.1.0 Fixed in 7.1.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-3807 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 38a52e0d2a37 Credits István Márton Required privilege Contributor Published...

WordPress Porto Theme - Functionality Plugin <= 3.1.0 is vulnerable to Local File Inclusion

Software Porto Theme - Functionality Type Plugin Vulnerable versions = 3.1.0 Fixed in 3.1.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-3808 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 05d6982e8315 Credits István Márton Required privileg...

WordPress Meow Gallery Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Meow Gallery Type Plugin Vulnerable versions = 5.1.3 Fixed in 5.1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4386 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ff273a246878 Credits Krzysztof Zając Required...

WordPress Church Admin Plugin <= 4.1.32 is vulnerable to Cross Site Request Forgery (CSRF)

Software Church Admin Type Plugin Vulnerable versions = 4.1.32 Fixed in 4.2.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34828 Patch priority Low CVSS severity Low 4.3 Developer Andy Moyle PSID 2d0beb058c1b Credits Dhabaleshwar Das Required...

WordPress ShopBuilder – Elementor WooCommerce Builder Addons Plugin <= 2.1.8 is vulnerable to Sensitive Data Exposure

Software ShopBuilder – Elementor WooCommerce Builder Addons Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-34812 Patch priority Low CVSS severity Low 5.3 Developer Mamunur Rashid PSID 3f187cb1d98a...

WordPress Swift Performance Lite Plugin <= 2.3.6.18 is vulnerable to Broken Access Control

Software Swift Performance Lite Type Plugin Vulnerable versions = 2.3.6.18 Fixed in 2.3.6.19 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3722 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 4365655c4219 Credits Lucio Sá Required...

WordPress WebinarPress Plugin <= 1.33.20 is vulnerable to Cross Site Request Forgery (CSRF)

Software WebinarPress Type Plugin Vulnerable versions = 1.33.20 Fixed in 1.33.21 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-34818 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID bbb41d22c921 Credits Majed Refaea Required...

WordPress Contact List – Easy Business Directory, Staff Directory and Address Book Plugin Plugin <= 2.9.87 is vulnerable to Broken Access Control

Software Contact List – Easy Business Directory, Staff Directory and Address Book Plugin Type Plugin Vulnerable versions = 2.9.87 Fixed in 2.9.88 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34821 Patch priority Low CVSS severity Low 5.3 Developer...

WordPress Easy Digital Downloads Plugin <= 3.2.11 is vulnerable to Sensitive Data Exposure

Software Easy Digital Downloads Type Plugin Vulnerable versions = 3.2.11 Fixed in 3.2.12 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2024-32100 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c5d829b14d8d Credits Dhabaleshwar D...

WordPress Link Library Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)

Software Link Library Type Plugin Vulnerable versions = 7.6.11 Fixed in 7.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4281 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID abed5ec79423 Credits Krzysztof Zając Required...

WordPress Breakdance Plugin <= 1.7.1 is vulnerable to Remote Code Execution (RCE)

Software Breakdance Type Plugin Vulnerable versions = 1.7.1 Fixed in 1.7.2 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-4605 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID 7a57cfb648b8 Credits Francesco Carlucci Required privilege...

WordPress Fancy Elementor Flipbox Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)

Software Fancy Elementor Flipbox Type Plugin Vulnerable versions = 2.5.2 Fixed in 2.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34572 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6fdd1efa32f5 Credits Khalid Yusuf Required privileg...

WordPress Beaver Builder Plugin <= 2.8.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Beaver Builder Type Plugin Vulnerable versions = 2.8.1.1 Fixed in 2.8.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3923 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 38b338352313 Credits wesley wcraft Require...

WordPress Stockholm Theme <= 9.6 is vulnerable to Local File Inclusion

Software Stockholm Type Theme Vulnerable versions = 9.6 Fixed in 9.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-34551 Patch priority High CVSS severity High 9 Developer Claim ownership PSID ba79b1de262f Credits Rafie Muhammad Patchstack Required privilege...

WordPress Gold Addons for Elementor Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)

Software Gold Addons for Elementor Type Plugin Vulnerable versions = 1.2.9 Fixed in 1.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34563 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4ec8bc999d21 Credits Khalid Yusuf Required...