6480 matches found
CVE-2024-8479 Simple Spoiler 1.2 - 1.3 - Unauthenticated Arbitrary Shortcode Execution
The The Simple Spoiler plugin for WordPress is vulnerable to arbitrary shortcode execution in versions 1.2 to 1.3. This is due to the plugin adding the filter addfilter'commenttext', 'doshortcode'; which will run all shortcodes in comments. This makes it possible for unauthenticated attackers to...
CVE-2024-6544 Custom Post Limits <= 4.4.1 - Unauthenticated Full Path Disclosure
The Custom Post Limits plugin for WordPress is vulnerable to full path disclosure in all versions up to, and including, 4.4.1. This is due to the plugin utilizing bootstrap and leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to retrieve the full path...
CVE-2024-8742
CVE-2024-8742 affects the WordPress plugin Essential Addons for Elementor (vulnerable up to and including 6.0.3). The issue is a Stored Cross-Site Scripting in the Filterable Gallery widget caused by insufficient input sanitization and output escaping. Exploitation requires an authenticated user ...
PT-2024-39015
Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor plugin for WordPress versions up to, and including, 6.0.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Fancy Text widget due to insufficient input sanitization and output...
CVE-2024-6856
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2024-6010 Cost Calculator Builder PRO <= 3.2.1 - Unauthenticated Price Manipulation
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This is due to the plugin allowing the price field to be manipulated prior to processing via the 'createccorder' function, called from the Cost Calculator Builder...
CVE-2024-6010
CVE-2024-6010 affects Cost Calculator Builder PRO for WordPress up to version 3.2.1, where unauthenticated users can manipulate the price of orders via the create_cc_order function. This is caused by insufficient input validation on the price field before processing in the Cost Calculator Builder...
CVE-2024-7415 Remember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure
The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin allowing direct access to the bootstrap.php file which has displayerrors on. This makes it possible for unauthenticated attackers to retrieve...
CVE-2024-6332
The CVE-2024-6332 entry for Amelia Premium (<=7.7) and Amelia Lite (<=1.2.3) is supported by connected sources indicating a missing capability check in ameliaButtonCommand that allows unauthenticated access to employee calendar details; in the Premium version this also exposes Google Calend...
CVE-2024-8318
The CVE-2024-8318 entry relates to the WordPress Attributes for Blocks plugin (≤1.0.6). It implements a Stored XSS via the attributesForBlocks parameter due to insufficient input sanitization and output escaping, allowing authenticated attackers with Contributor+ access to inject scripts that exe...
CVE-2024-8117
CVE-2024-8117 refers to the The Ultimate WordPress Toolkit – WP Extended plugin for WordPress. The vulnerability is a Reflected Cross‑Site Scripting via the ‘selected_option’ parameter in versions up to and including 3.0.8, caused by insufficient input sanitization and output escaping. An unauthe...
CVE-2024-8252 Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion
The Clean Login plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.14.5 via the 'template' attribute of the clean-login-register shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and...
WordPress The Events Calendar Pro plugin <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution vulnerability
Authenticated Administrator+ PHP Object Injection to Remote Code Execution vulnerability discovered by István Márton in WordPress Plugin The Events Calendar PRO versions = 7.0.2...
CVE-2023-6987
CVE-2023-6987 affects the WordPress plugin String locator. It is a reflected XSS vulnerability triggered by the sql-column parameter in all versions up to and including 2.6.5, due to insufficient input sanitization and output escaping. Exploitation requires WP_DEBUG to be enabled and allows an un...
CVE-2024-7384
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the acymextractArchive function in all versions up to, and including, 9.7.2. This makes it possible fo...
CVE-2024-6864
CVE-2024-6864 : The WP Last Modified Info WordPress plugin is vulnerable to Stored XSS via the template attribute of the lmt-post-modified-info shortcode in all versions up to 1.9.0. Exploitation requires authentication at Contributor level or higher, enabling an attacker to inject scripts that e...
WordPress WP Last Modified Info plugin <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via lmt-post-modified-info Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via lmt-post-modified-info Shortcode vulnerability discovered by Webbernaut in WordPress Plugin WP Last Modified Info versions = 1.9.0...
CVE-2023-4604
The Slideshow, Image Slider by 2J plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ parameter in versions up to, and including, 1.3.54 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
PT-2024-37643 · WordPress · The News Element Elementor Blog Magazine Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: The News Element Elementor Blog Magazine WordPress plugin versions prior to 1.0.6 Description: The issue allows an unauthenticated attacker to include and execute PHP files on the server via the template parameter, enabling the execution of a...
CVE-2024-6823
The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation involving the mla-inline-edit-upload-scripts AJAX action in all versions up to, and including, 3.18. This makes it possible for authenticated attackers, with Author-level...