WordPress Branda Plugin <= 3.4.18 is vulnerable to Full Path Disclosure (FPD)

Software Branda Type Plugin Vulnerable versions = 3.4.18 Fixed in 3.4.19 OWASP Top 10 A5: Security Misconfiguration Classification Full Path Disclosure FPD CVE CVE-2024-6554 Patch priority Low CVSS severity Low 5.3 Developer WPMU DEV PSID 85b623e615a7 Credits stealthcopter Required privilege...

WordPress Branda Plugin <= 3.4.17 is vulnerable to Cross Site Scripting (XSS)

Software Branda Type Plugin Vulnerable versions = 3.4.17 Fixed in 3.4.18 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37239 Patch priority Low CVSS severity Low 5.9 Developer WPMU DEV PSID c46fde0b0815 Credits Fulan Engineering Required privilege Administrator...

WordPress Branda Plugin <= 3.4.8.1 is vulnerable to Cross Site Scripting (XSS)

Software Branda Type Plugin Vulnerable versions = 3.4.8.1 Fixed in 3.4.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 5.9 Developer WPMU DEV PSID a80ca4d3559a Credits Unknown Required privilege Administrator Publish...