CVE-2023-38395 WordPress WP Clone Menu plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Afzal Multani WP Clone Menu.This issue affects WP Clone Menu: from n/a through 1.0.1...

CVE-2023-38395

CVE-2023-38395 affects the WP Clone Menu WordPress plugin (versions

WordPress plugin WP GPX Map security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-34758

Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4...

CVE-2023-48273

Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Preloader for Website.This issue affects Preloader for Website: from n/a through 1.2.2...

CVE-2024-34758 WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.6.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4...

CVE-2024-34758

CVE-2024-34758 is a Missing Authorization (broken access control) vulnerability in the WP Fundraising Donation and Crowdfunding Platform (FundEngine) plugin for WordPress, affecting versions up to 1.6.4. Multiple sources confirm the issue and track it under CVE-2024-34758; Red Hat and NVD descrip...

CVE-2024-35663

Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0...

CVE-2024-35667

Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19...

CVE-2024-35168

Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1...

CVE-2024-35168

CVE-2024-35168 is a Missing Authorization vulnerability in the WordPress plugin WP Discourse, affecting WP Discourse versions from unspecified (n/a) up to 2.5.1. The public data provide a CVSS v3.1 base score of 4.3 (Network attack, Low attack complexity, Low privileges required, No user interact...

CVE-2024-35663

CVE-2024-35663 is a Missing Authorization vulnerability in HahnCreativeGroup WP Translate affecting WP Translate from n/a through 5.3.0. Public details indicate a Network attack vector with Low privileges required, and impact limited to Integrity/Availability (I/L) as per CVSS 3.1 metrics (base s...

CVE-2024-35667

CVE-2024-35667: Missing Authorization vulnerability in WP EasyCart ≤ 5.5.19. Affected: WP EasyCart plugin for WordPress. Base CVSS 3.1 v3: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N; Base score 5.3 (Medium). Root cause/affected versions are stated; no exploit details or remediation are provided in the i...

WP Shortcodes Plugin — Shortcodes Ultimate < 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode

Description The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sulightbox shortcode in all versions up to, and including, 7.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. Th...

CVE-2024-35735

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

CVE-2024-35721

Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5...

CVE-2024-35722

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

CVE-2024-35717

No technical details about CVE-2024-35717 are present in the provided Connected documents. Public specifics (affected version range, impact, and mitigation) are not disclosed here. Monitor official advisories for precise exploitation vectors and fixes.

CVE-2024-35722

Technical details about CVE-2024-35722 are not publicly available in the provided documents. No affected product/version is specified here. Monitor for official advisories and updates from vendors or CVE databases.

CVE-2024-35735

CVE-2024-35735 is a Missing Authorization vulnerability in the CodePeople WP Time Slots Booking Form plugin for WordPress, affecting versions up to 1.2.11 (listed as affected from n/a through 1.2.11). The Red Hat vulnerability entry mirrors these details. The connected documents do not provide a ...