CVE-2024-54393

Cross-Site Request Forgery CSRF vulnerability in Sheikh Heera WP Fiddle wp-fiddle allows Stored XSS.This issue affects WP Fiddle: from n/a through = 1.0...

CVE-2024-54394

Cross-Site Request Forgery CSRF vulnerability in khubbaib Mandrill WP email-form-under-post allows Stored XSS.This issue affects Mandrill WP: from n/a through = 1.0.5...

CVE-2024-54392

Cross-Site Request Forgery CSRF vulnerability in midoks WP微信机器人 wp-weixin-robot allows Stored XSS.This issue affects WP微信机器人: from n/a through = 5.3.5...

CVE-2024-54380

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Filippo Bodei WP Cookies Enabler wp-cookies-enabler allows PHP Local File Inclusion.This issue affects WP Cookies Enabler: from n/a through = 1.0.1...

CVE-2024-54363

Incorrect Privilege Assignment vulnerability in saiful.total Wp NssUser Register wp-nssuser-register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through = 1.0.0...

CVE-2024-54355

Cross-Site Request Forgery CSRF vulnerability in brandtoss WP Mailster wp-mailster allows Cross Site Request Forgery.This issue affects WP Mailster: from n/a through = 1.8.17.0...

CVE-2024-54332

Cross-Site Request Forgery CSRF vulnerability in WPFactory WP Currency Exchange Rates wp-currency-exchange-rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through = 1.2.0...

CVE-2024-54380 WordPress WP Cookies Enabler plugin <= 1.0.1 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Filippo Bodei WP Cookies Enabler allows PHP Local File Inclusion.This issue affects WP Cookies Enabler: from n/a through 1.0.1...

CVE-2024-54380

CVE-2024-54380 (WP Cookies Enabler) is an Unpatched Local File Inclusion vulnerability in the WP Cookies Enabler plugin for WordPress (affected: WP Cookies Enabler

CVE-2024-54442 WordPress Better WP Login Page plugin <= 1.1.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cortesfrau Better WP Login Page better-wp-login-page allows Stored XSS.This issue affects Better WP Login Page: from n/a through = 1.1.2...

CVE-2024-54442

CVE-2024-54442 affects the WordPress plugin Better WP Login Page (versions up to 1.1.2). Description indicates an improper neutralization of input during web page generation leading to a Stored Cross‑Site Scripting (Stored XSS) vulnerability. Root cause and impact are specified in the Red Hat ent...

CVE-2024-54442 WordPress Better WP Login Page plugin <= 1.1.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cortesfrau Better WP Login Page better-wp-login-page allows Stored XSS.This issue affects Better WP Login Page: from n/a through = 1.1.2...

CVE-2024-54355

CVE-2024-54355 is a CSRF vulnerability in WP Mailster (brand t) affecting WP Mailster versions up to 1.8.17.0. Connected Red Hat entry repeats the CSRF description. Patch status in Wordfence shows Patch Status: Patched; Published: 2024-12-11. Technical details on exact exploit specifics or affect...

CVE-2024-54355 WordPress WP Mailster plugin <= 1.8.17.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in brandtoss WP Mailster allows Cross Site Request Forgery.This issue affects WP Mailster: from n/a through 1.8.17.0...

CVE-2024-54355 WordPress WP Mailster plugin <= 1.8.17.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in brandtoss WP Mailster wp-mailster allows Cross Site Request Forgery.This issue affects WP Mailster: from n/a through = 1.8.17.0...

CVE-2024-54332 WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPFactory WP Currency Exchange Rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through 1.2.0...

CVE-2024-54392 WordPress WP微信机器人 plugin <= 5.3.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in midoks WP微信机器人 wp-weixin-robot allows Stored XSS.This issue affects WP微信机器人: from n/a through = 5.3.5...

CVE-2024-54392 WordPress WP微信机器人 plugin <= 5.3.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in midoks WP微信机器人 wp-weixin-robot allows Stored XSS.This issue affects WP微信机器人: from n/a through = 5.3.5...

CVE-2024-54392

CVE-2024-54392 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP微信机器人 (Midoks WP Weixin Robot) that permits Stored XSS on affected pages. Public references within the connected sources identify the issue as affecting the WP微信机器人 plugin for WordPress versions f...

CVE-2024-54393 WordPress WP Fiddle plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sheikh Heera WP Fiddle allows Stored XSS.This issue affects WP Fiddle: from n/a through 1.0...