CVE-2024-51820

CVE-2024-51820 is an SQL Injection in L Squared Hub WP – Virtual Device Plugin. The vulnerable component is the L Squared Hub WP plugin, with impact described as SQL injection risk and affected versions from n/a through 1.0. Root cause: improper neutralization of input used in SQL commands. Publi...

CVE-2024-51837

CVE-2024-51837 is a WordPress WP Contest plugin SQL injection vulnerability (Improper Neutralization of Special Elements) affecting WP Contest

CVE-2024-51837 WordPress WP Contest plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SONS Creative Development WP Contest allows SQL Injection.This issue affects WP Contest: from n/a through 1.0.0...

CVE-2024-10958

The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This is due to the software allowing users to execute an action that does not properly validate a value...

CVE-2024-10958 WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay

The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This is due to the software allowing users to execute an action that does not properly validate a value...

CVE-2024-10958

CVE-2024-10958 affects the WP Photo Album Plus WordPress plugin. The Red Hat and Wordfence sources confirm an unauthenticated arbitrary shortcode execution vulnerability via the getshortcodedrenderedfenodelay AJAX action in versions up to 8.8.08.007. The underlying issue is a lack of proper valid...

WordPress plugin The WP Photo Album Plus 代码注入漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Give is a fundraising platform plugin used in it.WordPress plugin is an application...

PT-2024-34964 · WordPress · Wp Contest

Name of the Vulnerable Software and Affected Versions: WP Contest versions n/a through 1.0.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially enabling...

Exploit for CVE-2024-49681

CVE-2024-49681 WP Sessions Time Monitoring Full Automatic...

CVE-2024-51606

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Blrt Blrt WP Embed blrt-wp-embed allows SQL Injection.This issue affects Blrt WP Embed: from n/a through = 1.6.9...

CVE-2024-51606 WordPress Blrt WP Embed plugin <= 1.6.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Blrt Blrt WP Embed blrt-wp-embed allows SQL Injection.This issue affects Blrt WP Embed: from n/a through = 1.6.9...

CVE-2024-51606

The CVE-2024-51606 vulnerability affects the WordPress plugin Blrt WP Embed, version

CVE-2024-51606 WordPress Blrt WP Embed plugin <= 1.6.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Blrt Blrt WP Embed blrt-wp-embed allows SQL Injection.This issue affects Blrt WP Embed: from n/a through = 1.6.9...

CVE-2024-51623

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mehral WP EIS wp-eis allows SQL Injection.This issue affects WP EIS: from n/a through = 1.3.3...

CVE-2024-51622

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP-EXPERTS.IN WP EASY RECIPE wp-easy-recipe allows Stored XSS.This issue affects WP EASY RECIPE: from n/a through = 1.6...

CVE-2024-51611

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Miguel Peixe WP Feature Box wp-feature-box allows Stored XSS.This issue affects WP Feature Box: from n/a through = 0.1.3...

CVE-2024-51611 WordPress WP Feature Box plugin <= 0.1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Miguel Peixe WP Feature Box wp-feature-box allows Stored XSS.This issue affects WP Feature Box: from n/a through = 0.1.3...

CVE-2024-51611

CVE-2024-51611 is a stored XSS in the WordPress plugin WP Feature Box, affecting versions &lt;= 0.1.3. The vulnerability stems from improper neutralization of input during web page generation, enabling stored Cross‑Site Scripting via user-provided data. Impact is described as Stored XSS; explicit...

CVE-2024-51622

CVE-2024-51622 is a stored Cross-Site Scripting (XSS) vulnerability in the WordPress WP EASY RECIPE plugin, affecting versions up to 1.6. The issue arises from improper input neutralization during web page generation, enabling stored XSS. The CVSSv3.1 base metrics are: AV:N/AC:L/PR:L/UI:R/S:C/C:L...

CVE-2024-51623 WordPress WP EIS plugin <= 1.3.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mehral WP EIS wp-eis allows SQL Injection.This issue affects WP EIS: from n/a through = 1.3.3...