Lucene search
+L
PatchstackMost viewed

49993 matches found

Patchstack
Patchstack
added 2026/06/09 9:04 a.m.27 views

WordPress Events Calendar for GeoDirectory plugin <= 2.3.28 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Mitchell in WordPress Plugin Events Calendar for GeoDirectory versions = 2.3.28...

8.8CVSS5.4AI score0.00275EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/06/04 9:58 a.m.27 views

WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin OttoKit versions = 1.1.27...

9.8CVSS5.5AI score0.005EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/06/02 8:26 a.m.27 views

WordPress Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution vulnerability

Authenticated Contributor+ Remote Code Execution vulnerability discovered by kai63001 in WordPress Plugin Spectra versions = 2.19.25...

8.8CVSS5.8AI score0.01174EPSS
SaveExploits3References1Affected Software1
Patchstack
Patchstack
added 2026/05/29 1:33 p.m.27 views

WordPress LiteSpeed Cache plugin <= 7.7 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Plugin LiteSpeed Cache versions = 7.7...

7.2CVSS5.8AI score0.00359EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/05/25 7:30 a.m.27 views

WordPress Read More & Accordion plugin <= 3.5.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by BIMA IKHSAN in WordPress Plugin Read More & Accordion versions = 3.5.7...

8.8CVSS5.8AI score0.01242EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/05/25 7:01 a.m.27 views

WordPress WooCommerce PayPal Payments plugin <= 4.0.1 - Missing Authorization to Unauthenticated Order Manipulation and Information Disclosure vulnerability

Missing Authorization to Unauthenticated Order Manipulation and Information Disclosure vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin WooCommerce PayPal Payments versions = 4.0.1...

8.2CVSS5.8AI score0.00401EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/05/19 12:07 p.m.27 views

WordPress Remove Yellow BGBOX plugin <= 1.0 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Remove Yellow BGBOX versions = 1.0...

4.3CVSS5.8AI score0.00158EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/05/15 9:58 a.m.27 views

WordPress Receive Notifications After Form Submitting – Form Notify for Any Forms plugin <= 1.1.10 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin Receive Notifications After Form Submitting – Form Notify for Any Forms versions = 1.1.10...

9.8CVSS5.8AI score0.0073EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2026/05/13 10:20 a.m.27 views

WordPress Court Reservation – Manage Your Court Bookings Online plugin <= 1.10.11 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by MD. TAREQ AHAMED JONY itztrq - Knight Squad in WordPress Plugin Court Reservation versions = 1.10.11...

7.5CVSS5.9AI score0.00273EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/05/12 12:00 a.m.27 views

WordPress RTMKit plugin <= 2.0.2 - Authenticated (Author+) Missing Authorization to Widget Configuration Modification vulnerability

Authenticated Author+ Missing Authorization to Widget Configuration Modification vulnerability discovered by momopon1415 in WordPress Plugin RTMKit versions = 2.0.2...

4.3CVSS5.8AI score0.00288EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/05/07 10:26 a.m.27 views

WordPress Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin <= 1.53.0 - Missing Authorization to Authenticated (Subscriber+) Scheduled Form Submission Export vulnerability

Missing Authorization to Authenticated Subscriber+ Scheduled Form Submission Export vulnerability discovered by anhcd05 - VNPT Cyber Immunity in WordPress Plugin Forminator versions = 1.53.0...

6.5CVSS5.8AI score0.00438EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/05/06 2:23 p.m.27 views

WordPress All-in-One WP Migration Unlimited Extension plugin <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Backup Schedule Creation and Backup File Download vulnerability discovered by Sélim Lanouar whattheslime in WordPress Plugin All-in-One WP Migration Unlimited Extension versions = 2.83...

6.5CVSS5.8AI score0.00266EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/05/05 4:33 p.m.27 views

NPM: VM2 Has a Sandbox Escape Issue via SuppressedError

NPM: VM2 Has a Sandbox Escape Issue via SuppressedError vulnerability discovered by ? in WordPress Npm vm2 versions = 3.10.4...

10CVSS6AI score0.0071EPSS
SaveExploits1References9Affected Software1
Patchstack
Patchstack
added 2026/03/30 7:38 a.m.28 views

WordPress WP Lightbox 2 plugin < 3.0.7 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin WP Lightbox 2 versions 3.0.7...

4.8CVSS5.9AI score0.00189EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/03/24 8:31 a.m.27 views

WordPress ARForms plugin <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution vulnerability

Unauthenticated Blind Arbitrary Shortcode Execution vulnerability discovered by Krzysztof Zając - CERT PL in WordPress Plugin ARForms Form Builder versions = 1.7.2...

5.6CVSS5.8AI score0.00268EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/03/18 12:17 p.m.27 views

WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dragonzen in WordPress Plugin Booking calendar, Appointment Booking System versions = 3.2.36...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/01/16 11:37 p.m.27 views

WordPress Filr - Secure document library plugin <= 1.2.11 - Authenticated (Administrator+) Stored Cross-Site Scripting via HTML Upload vulnerability

WordPress Filr - Secure document library plugin = 1.2.11 - Authenticated Administrator+ Stored Cross-Site Scripting via HTML Upload vulnerability discovered by Phap Nguyen Anh - FIS in WordPress Plugin Filr versions = 1.2.11...

4.4CVSS5.8AI score0.00235EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/01/06 11:24 p.m.27 views

WordPress Email Customizer for WooCommerce | Drag and Drop Email Templates Builder plugin <= 2.6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Email Template Content vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via Email Template Content vulnerability discovered by fallenofalbaz in WordPress Plugin Email Customizer for WooCommerce versions = 2.6.7...

4.4CVSS5.5AI score0.00337EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/12/31 5:14 p.m.27 views

WordPress Dashboard Beacon plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by HunSec in WordPress Plugin Dashboard Beacon versions = 1.2.0...

5.9CVSS5.9AI score0.00166EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/12 11:11 a.m.27 views

WordPress WPMasterToolKit (WPMTK) plugin <= 2.13.0 - Authenticated (Author+) Code Injection vulnerability

Authenticated Author+ Code Injection vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin WPMasterToolKit versions = 2.13.0...

5.3CVSS7.1AI score0.00465EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/11/05 1:23 a.m.27 views

WordPress AI Engine plugin <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation vulnerability

Unauthenticated Sensitive Information Exposure to Privilege Escalation vulnerability discovered by Emiliano Versini in WordPress Plugin AI Engine versions = 3.1.3...

9.8CVSS7.4AI score0.74759EPSS
SaveExploits5References1Affected Software1
Patchstack
Patchstack
added 2025/10/09 10:16 p.m.27 views

WordPress Slider Revolution plugin <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary File Read vulnerability discovered by stealthcopter in WordPress Plugin Slider Revolution versions = 6.7.37...

6.5CVSS6.8AI score0.0038EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/09/05 11:05 a.m.27 views

WordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Monyxi versions = 1.1.8...

8.1CVSS7AI score0.00535EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/07/18 4:18 a.m.27 views

WordPress MasterStudy LMS Pro plugin <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Thái An in WordPress Plugin MasterStudy LMS Pro versions = 4.7.9...

7.5CVSS6.8AI score0.00608EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/06/14 3:04 a.m.27 views

WordPress File Manager Pro – Filester plugin <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload vulnerability

Authenticated Administrator+ Arbitrary File Upload vulnerability discovered by TANG Cheuk Hei siunam in WordPress Plugin File Manager Pro versions = 1.8.8...

7.2CVSS6.8AI score0.00573EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/06/11 12:00 a.m.27 views

WordPress Flozen Theme < 1.5.1 is vulnerable to Arbitrary File Upload

Software Flozen Type Theme Vulnerable versions 1.5.1 Fixed in 1.5.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2025-49071 Patch priority High CVSS severity High 10 Developer Claim ownership PSID b0bba867fa7b Credits Phat RiO - BlueRock Required privilege Unauthenticat...

10CVSS7.2AI score0.00488EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2025/06/05 2:34 p.m.27 views

WordPress Forminator plugin <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability discovered by Asaf Mozes in WordPress Plugin Forminator versions = 1.44.1...

6.4CVSS5.8AI score0.00282EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/06/05 1:44 a.m.27 views

WordPress Interactive Regional Map of Africa plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin Interactive Regional Map of Africa versions = 1.0...

4.3CVSS6.6AI score0.00145EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/05/28 9:57 p.m.27 views

WordPress Smash Balloon Instagram Feed plugin <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via data-plugin Attribute vulnerability discovered by Asaf Mozes in WordPress Plugin Instagram Feed versions = 6.9.0...

5.4CVSS5.5AI score0.00212EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/05/21 8:14 p.m.27 views

WordPress Digits plugin < 8.4.6.1 - Auth Bypass via OTP Bruteforcing vulnerability

Auth Bypass via OTP Bruteforcing vulnerability discovered by Saleh Tarawneh in WordPress Plugin Digits versions 8.4.6.1...

9.8CVSS8.7AI score0.1578EPSS
SaveExploits4References1Affected Software1
Patchstack
Patchstack
added 2025/05/05 9:02 p.m.27 views

WordPress Depicter Slider plugin <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter vulnerability

Unauthenticated SQL Injection via 's' Parameter vulnerability discovered by Muhamad Visat in WordPress Plugin Depicter Slider versions = 3.6.1...

7.5CVSS8.9AI score0.46373EPSS
SaveExploits6References1Affected Software1
Patchstack
Patchstack
added 2025/04/21 4:22 p.m.27 views

WordPress Greenshift plugin 11.4-11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by mikemyers in WordPress Plugin Greenshift versions 11.4-11.4.5...

8.8CVSS8.9AI score0.02439EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2025/04/04 1:26 p.m.27 views

WordPress Table Block by Tableberg plugin <= 0.6.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Table Block by Tableberg versions = 0.6.10...

6.5CVSS6.9AI score0.00392EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/04/03 6:29 a.m.27 views

WordPress LuckyWP Table of Contents plugin <= 2.1.10 - Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability discovered by mikemyers in WordPress Plugin LuckyWP Table of Contents versions = 2.1.10...

6.1CVSS7.4AI score0.00216EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/02/21 12:00 a.m.27 views

WordPress Theme File Duplicator Plugin <= 1.3 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by LVT-tholv2k in WordPress Plugin Theme File Duplicator versions = 1.3...

9.9CVSS7AI score0.00537EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/26 12:00 a.m.27 views

WordPress Simple Side Tab Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)

Software Simple Side Tab Type Plugin Vulnerable versions = 2.1.14 Fixed in 2.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10551 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2f20e42d5a25 Credits Krugov Artyom Required...

5.6AI score0.00311EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2024/11/25 12:00 a.m.27 views

WordPress InPost Gallery Plugin <= 2.1.4.2 is vulnerable to Arbitrary Code Execution

Software InPost Gallery Type Plugin Vulnerable versions = 2.1.4.2 Fixed in 2.1.4.3 OWASP Top 10 A3: Injection Classification Arbitrary Code Execution CVE CVE-2024-11002 Patch priority High CVSS severity High 6.3 Developer Claim ownership PSID 33afec67c5eb Credits Arkadiusz Hydzik Required privile...

6.3CVSS7AI score0.00594EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/11/22 1:59 p.m.27 views

WordPress Ahmeti Wp Güzel Sözler plugin <= 4.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Ahmeti Wp Güzel Sözler versions = 4.0...

4.3CVSS7AI score0.00234EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/21 12:00 a.m.27 views

WordPress System Dashboard Plugin < 2.8.15 is vulnerable to Path Traversal

Software System Dashboard Type Plugin Vulnerable versions 2.8.15 Fixed in 2.8.15 OWASP Top 10 A4: Insecure Design Classification Path Traversal CVE CVE-2024-10708 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 8350df71b2da Credits Dogus DEMIRKIRAN Required privilege...

6.5AI score0.0203EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2024/11/20 12:00 a.m.27 views

WordPress SP Blog Designer Plugin <= 1.0.0 is vulnerable to Local File Inclusion

Software SP Blog Designer Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-52498 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 33032dc1d973 Credits João Pedro S Alcântara Kinorth...

6.5AI score0.00637EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2024/11/18 12:00 a.m.27 views

WordPress Geolocator Plugin <= 1.1 is vulnerable to PHP Object Injection

Software Geolocator Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52443 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 70b8a65b2fb3 Credits LVT-tholv2k Required privilege Unauthenticated...

9.8CVSS6.9AI score0.00556EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/11/15 12:00 a.m.27 views

WordPress Lis Video Gallery Plugin <= 0.2.1 is vulnerable to PHP Object Injection

Software Lis Video Gallery Type Plugin Vulnerable versions = 0.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52430 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID a078bb126c5a Credits LVT-tholv2k Required privilege...

9.8CVSS7.2AI score0.01072EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/14 12:00 a.m.27 views

WordPress WP Activity Log Plugin <= 5.2.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Activity Log Type Plugin Vulnerable versions = 5.2.1 Fixed in 5.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10793 Patch priority Medium CVSS severity Medium 7.1 Developer Melapress PSID ad9533377437 Credits mikemyers Required...

7.2CVSS5.9AI score0.01369EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2024/11/11 12:00 a.m.27 views

WordPress WP Photo Album Plus Plugin <= 8.8.08.007 is vulnerable to Broken Access Control

Software WP Photo Album Plus Type Plugin Vulnerable versions = 8.8.08.007 Fixed in 8.9.01.001 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-10958 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d60c5fd2604a Credits Arkadiusz...

7.3CVSS6.8AI score0.01644EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.27 views

WordPress codeSnips Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software codeSnips Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51808 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b3a7768e4e50 Credits SOPROBRO Required privilege Contributor Publishe...

6.5CVSS6.9AI score0.00367EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.27 views

WordPress OS Our Team Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)

Software OS Our Team Type Plugin Vulnerable versions = 1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52341 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5778f7cc0c55 Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.27 views

WordPress Poll Maker Plugin <= 5.4.6 is vulnerable to SQL Injection

Software Poll Maker Type Plugin Vulnerable versions = 5.4.6 Fixed in 5.4.7 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-9874 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 26f7f7b011e3 Credits tmrswrr Required privilege Administrator Published 8...

7.2CVSS6.8AI score0.00717EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.27 views

WordPress News Articles Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software News Articles Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51897 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b2e622b9d30c Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.5AI score0.00315EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.27 views

WordPress Postify: Post Layout For Elementor Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Postify: Post Layout For Elementor Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51893 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9a15834c2f21 Credits Gab Required privileg...

6.5CVSS6.5AI score0.00315EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.27 views

WordPress Map Store Locator Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Map Store Locator Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51920 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3bad7bf99174 Credits SOPROBRO Required privilege Contributo...

6.5CVSS6.9AI score0.00315EPSS
SaveExploits0References1Affected Software1
Total number of security vulnerabilities5000