Lucene search
+L

16682 matches found

Patchstack
Patchstack
added 2024/11/04 12:00 a.m.13 views

WordPress Wp Slide Categorywise Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Wp Slide Categorywise Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51690 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 665f14e45c29 Credits João Pedro S Alcântara Kinorth...

7.1CVSS6.9AI score0.0027EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/04 12:00 a.m.12 views

WordPress WP MMenu Lite Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software WP MMenu Lite Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51705 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5eff0587e5b0 Credits João Pedro S Alcântara Kinorth...

7.1CVSS6.9AI score0.0027EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/11/01 3:15 p.m.6 views

CVE-2024-47317

Missing Authorization vulnerability in WP Quads Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads: from n/a through 2.0.84...

8.8CVSS5.8AI score0.00377EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.49 views

CVE-2024-47317

Missing Authorization vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded.This issue affects Ads by WPQuads: from n/a through = 2.0.84...

8.8CVSS0.00377EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.42 views

CVE-2024-47318

Missing Authorization vulnerability in Magazine3 PWA for WP & AMP pwa-for-wp.This issue affects PWA for WP & AMP: from n/a through = 1.7.72...

8.8CVSS0.00309EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.44 views

CVE-2024-47321

Missing Authorization vulnerability in Fahad Mahmood WP Datepicker wp-datepicker.This issue affects WP Datepicker: from n/a through = 2.1.1...

9.8CVSS0.00412EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.39 views

CVE-2024-47314

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through = 3.2.8...

8.8CVSS0.00393EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.16 views

CVE-2024-43980

Missing Authorization vulnerability in CozyThemes Fota WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fota WP: from n/a through 1.4.1...

9.8CVSS0.00519EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.25 views

CVE-2024-43937

Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.10...

6.4CVSS0.00358EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.13 views

CVE-2024-43229

Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Analytics: from n/a through = 1.4.9...

4.3CVSS0.00358EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.21 views

CVE-2024-43143

Missing Authorization vulnerability in Roundup WP Registrations for the Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Registrations for the Events Calendar: from n/a through 2.12.1...

6.4CVSS0.00387EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.16 views

CVE-2024-43146

Missing Authorization vulnerability in Ahmed Kaludi, Mohammed Kaludi AMP for WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AMP for WP: from n/a through 1.0.96.1...

6.3CVSS0.00392EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.24 views

CVE-2024-39640

Missing Authorization vulnerability in QuadLayers WP Social Feed Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Feed Gallery: from n/a through 4.3.9...

6.5CVSS0.00442EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.14 views

CVE-2024-38695

Missing Authorization vulnerability in Martin Gibson WP GoToWebinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP GoToWebinar: from n/a through 15.6...

4.3CVSS0.00404EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.12 views

CVE-2024-38714

Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through = 1.68.232...

4.3CVSS0.00372EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.15 views

CVE-2024-37926

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.9...

5.3CVSS0.00381EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.62 views

CVE-2024-44038

CVE-2024-44038 : WordPress Sunshine Photo Cart plugin

9.8CVSS5.9AI score0.00409EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/11/01 2:18 p.m.49 views

CVE-2024-37443

CVE-2024-37443 corresponds to a Missing Authorization vulnerability in the WP Job Manager - Resume Manager plugin (affected: WP Job Manager - Resume Manager,

4.3CVSS4.7AI score0.00337EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.67 views

CVE-2024-37926

CVE-2024-37926 describes a Missing Authorization vulnerability in the WordPress plugin WP Accessibility Helper (WAH) that allows accessing functionality not properly constrained by ACLs. The issue affects WAH versions from n/a up through 0.6.2.9. The initial documents do not provide a remediation...

5.3CVSS5.3AI score0.00381EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.46 views

CVE-2024-38695

CVE-2024-38695 documents a Missing Authorization vulnerability in the WordPress plugin WP GoToWebinar . The issue is described as an access-control misconfiguration affecting WP GoToWebinar versions up to and including 15.6, enabling exploitation due to incorrectly configured security levels. The...

4.3CVSS4.6AI score0.00404EPSS
SaveExploits0References1
Rows per page
Query Builder