Lucene search
+L
PatchstackMost viewed

47863 matches found

Patchstack
Patchstack
added 2024/04/25 12:0 a.m.21 views

WordPress XStore Theme <= 9.3.8 is vulnerable to Local File Inclusion

Software XStore Type Theme Vulnerable versions = 9.3.8 Fixed in 9.3.9 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-33560 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 6dff12fe54af Credits Rafie Muhammad Patchstack Required privilege...

9CVSS6.8AI score0.00597EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/04/25 12:0 a.m.21 views

WordPress WZone Plugin <= 14.0.33 is vulnerable to Privilege Escalation

Software WZone Type Plugin Vulnerable versions = 14.0.33 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-33549 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID a1d74d6dfe5c Credits Rafie Muhammad...

8.8CVSS6.5AI score0.00512EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/04/25 12:0 a.m.21 views

WordPress WZone Plugin <= 14.0.33 is vulnerable to SQL Injection

Software WZone Type Plugin Vulnerable versions = 14.0.33 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-33546 Patch priority High CVSS severity High 9.6 Developer Claim ownership PSID 44537a1aade6 Credits Rafie Muhammad Patchstack Required privilege Subscriber...

9.6CVSS6.8AI score0.00529EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/04/22 11:36 a.m.21 views

WordPress StreamWeasels Twitch Integration plugin <= 1.7.8 - API Sensitive Data Exposure vulnerability

API Sensitive Data Exposure vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin StreamWeasels Twitch Integration versions = 1.7.8...

5.3CVSS7AI score0.00547EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/22 12:0 a.m.21 views

WordPress Royal Elementor Addons Plugin <= 1.3.93 is vulnerable to Bypass Vulnerability

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.93 Fixed in 1.3.95 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2024-32786 Patch priority Low CVSS severity Low 5.3 Developer WProyal PSID 136b421b7f6f Credits Brandon Roldan Required...

9.8CVSS6.5AI score0.00455EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2024/04/22 12:0 a.m.21 views

WordPress 5 Stars Rating Funnel Plugin <= 1.2.67 is vulnerable to Broken Access Control

Software 5 Stars Rating Funnel Type Plugin Vulnerable versions = 1.2.67 Fixed in 1.3.02 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32725 Patch priority Low CVSS severity Low 5.3 Developer Tobias PSID a41d04f55930 Credits Dhabaleshwar Das Required...

5.3CVSS5.2AI score0.00298EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/04/22 12:0 a.m.21 views

WordPress WP Club Manager Plugin <= 2.2.11 is vulnerable to Broken Access Control

Software WP Club Manager Type Plugin Vulnerable versions = 2.2.11 Fixed in 2.2.12 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32719 Patch priority Low CVSS severity Low 5.3 Developer WP Club Manager PSID 9c15961e31ea Credits Mika Required privilege...

5.3CVSS6.6AI score0.00507EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/22 12:0 a.m.21 views

WordPress ARForms Plugin <= 6.4 is vulnerable to Arbitrary File Deletion

Software ARForms Type Plugin Vulnerable versions = 6.4 Fixed in 6.4.1 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-32703 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID 3d075249b9fb Credits Dave Jong Patchstack Required...

8.1CVSS6.5AI score0.00577EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/04/22 12:0 a.m.21 views

WordPress Newsletters Plugin <= 4.9.5 is vulnerable to Arbitrary File Upload

Software Newsletters Type Plugin Vulnerable versions = 4.9.5 Fixed in 4.9.6 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-32954 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID a5967c6d63a9 Credits Peng Zhou Required privilege Administrator...

9.1CVSS6.8AI score0.00603EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/19 12:0 a.m.21 views

WordPress User Registration Plugin <= 3.1.5 is vulnerable to Broken Access Control

Software User Registration Type Plugin Vulnerable versions = 3.1.5 Fixed in 3.2.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-2417 Patch priority High CVSS severity High 8.8 Developer Masteriyo PSID f4d185ab446a Credits Stiofan Required privilege...

8.8CVSS6.5AI score0.00938EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/04/18 12:0 a.m.21 views

WordPress tagDiv Composer Plugin <= 4.8 is vulnerable to Local File Inclusion

Software tagDiv Composer Type Plugin Vulnerable versions = 4.8 Fixed in 4.9 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-3813 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID 5ffa96c3f191 Credits István Márton Required privilege Contributor...

8.8CVSS6.9AI score0.00657EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/16 12:0 a.m.21 views

WordPress WP 404 Auto Redirect to Similar Post Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software WP 404 Auto Redirect to Similar Post Type Plugin Vulnerable versions = 1.0.4 Fixed in 1.0.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32559 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c85034ba240a Credits AtaTurk1925...

7.1CVSS6.5AI score0.00394EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/16 12:0 a.m.21 views

WordPress Master Slider Plugin <= 3.9.8 is vulnerable to Cross Site Scripting (XSS)

Software Master Slider Type Plugin Vulnerable versions = 3.9.8 Fixed in 3.9.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32580 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7119ccf52d56 Credits LVT-tholv2k Required privilege Contribut...

6.5CVSS6.6AI score0.00317EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/15 12:0 a.m.21 views

WordPress Ivory Search Plugin <= 5.5.5 is vulnerable to Broken Access Control

Software Ivory Search Type Plugin Vulnerable versions = 5.5.5 Fixed in 5.5.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3233 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5ff3a7d3e493 Credits Thura Moe Myint mgthuramoemyint...

4.3CVSS6.9AI score0.00445EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/04/15 12:0 a.m.21 views

WordPress Element Pack Elementor Addons Plugin <= 5.5.6 is vulnerable to Sensitive Data Exposure

Software Element Pack Elementor Addons Type Plugin Vulnerable versions = 5.5.6 Fixed in 5.6.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2966 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 29f45f5357e3 Credits Krzysztof...

7.5CVSS6.9AI score0.00492EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/04/15 12:0 a.m.21 views

WordPress Theme My Login Plugin <= 7.1.6 is vulnerable to Broken Access Control

Software Theme My Login Type Plugin Vulnerable versions = 7.1.6 Fixed in 7.1.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32525 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 11dbddbd2e7f Credits Abdi Pranata Required...

4.3CVSS6.5AI score0.00337EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/15 12:0 a.m.21 views

WordPress Testimonial Slider Plugin < 2.3.8 is vulnerable to Cross Site Scripting (XSS)

Software Testimonial Slider Type Plugin Vulnerable versions 2.3.8 Fixed in 2.3.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1746 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e974538b892e Credits Dmitrii Ignatyev Requir...

5.4CVSS5.7AI score0.00442EPSS
SaveExploits2References4Affected Software1
Patchstack
Patchstack
added 2024/04/15 12:0 a.m.21 views

WordPress Ultimate Member Plugin <= 2.8.4 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Member Type Plugin Vulnerable versions = 2.8.4 Fixed in 2.8.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2765 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 4af1ffb7c063 Credits tiborisaak Require...

5.4CVSS5.9AI score0.00502EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/04/11 12:0 a.m.21 views

WordPress Essential Grid Plugin <= 3.1.1 is vulnerable to Broken Access Control

Software Essential Grid Type Plugin Vulnerable versions = 3.1.1 Fixed in 3.1.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3235 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 597aadc22d06 Credits 1337Wannabe Required privilege...

5.3CVSS6.6AI score0.00688EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/04/10 12:0 a.m.21 views

WordPress Extra Product Options Builder for WooCommerce Plugin <= 1.2.104 is vulnerable to Cross Site Request Forgery (CSRF)

Software Extra Product Options Builder for WooCommerce Type Plugin Vulnerable versions = 1.2.104 Fixed in 1.2.105 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31940 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

4.3CVSS6.7AI score0.002EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/10 12:0 a.m.21 views

WordPress BEAR Plugin <= 1.1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software BEAR Type Plugin Vulnerable versions = 1.1.4.1 Fixed in 1.1.4.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31430 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4956c1908b33 Credits Dhabaleshwar Das Required...

8.8CVSS4.6AI score0.00224EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/08 12:0 a.m.21 views

WordPress NextGEN Gallery Plugin <= 3.59 is vulnerable to Broken Access Control

Software NextGEN Gallery Type Plugin Vulnerable versions = 3.59 Fixed in 3.59.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3097 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 1d6376e4869c Credits Peng Zhou Required privilege...

5.3CVSS6.5AI score0.38023EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/04/05 9:44 a.m.21 views

WordPress WordPress Tooltips plugin <= 9.5.3 - Cross Site Request Forgery (CSRF) leading to Stored XSS vulnerability

Cross Site Request Forgery CSRF leading to Stored XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin WordPress Tooltips versions = 9.5.3...

7.1CVSS6.1AI score0.00184EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/05 12:0 a.m.21 views

WordPress Contact Form Email Plugin <= 1.3.44 is vulnerable to Sensitive Data Exposure

Software Contact Form Email Type Plugin Vulnerable versions = 1.3.44 Fixed in 1.3.45 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-31302 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 17dc1fca0d2c Credits...

5.3CVSS6.5AI score0.0047EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/05 12:0 a.m.21 views

WordPress Watu Quiz Plugin <= 3.4.1 is vulnerable to Sensitive Data Exposure

Software Watu Quiz Type Plugin Vulnerable versions = 3.4.1 Fixed in 3.4.1.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0872 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 458d166de345 Credits Lucio Sá Required privilege...

4.3CVSS6.5AI score0.005EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/04/05 12:0 a.m.21 views

WordPress Hello Elementor Theme <= 3.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Hello Elementor Type Theme Vulnerable versions = 3.0.0 Fixed in 3.0.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31289 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8b6c120716f6 Credits Dhabaleshwar Das...

4.3CVSS6.7AI score0.002EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/01 12:0 a.m.21 views

WordPress Elements kit Elementor addons Plugin <= 3.0.6 is vulnerable to Local File Inclusion

Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.6 Fixed in 3.0.7 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-2047 Patch priority Low CVSS severity Low 8.5 Developer Wpmet PSID 9c94438e55c2 Credits wesley wcraft Required privilege...

8.8CVSS6.8AI score0.01482EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/03/29 10:50 a.m.21 views

WordPress DD Rating plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Cronus Patchstack Alliance in WordPress Plugin DD Rating versions = 1.7.1...

5.9CVSS7.1AI score0.00319EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/03/29 8:56 a.m.21 views

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar versions = 5.1...

6.5CVSS7.2AI score0.00337EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.22 views

WordPress iFlyChat – WordPress Chat Plugin <= 4.7.2 is vulnerable to Cross Site Scripting (XSS)

Software iFlyChat – WordPress Chat Type Plugin Vulnerable versions = 4.7.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31108 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d092a7fe63ad Credits LVT-tholv2k Required privilege...

6.5CVSS6.6AI score0.00337EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.21 views

WordPress Ninja Forms Plugin <= 3.8.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ninja Forms Type Plugin Vulnerable versions = 3.8.0 Fixed in 3.8.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-2113 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0a9480169593 Credits Tobias Weißhaar kun19...

4.3CVSS6.6AI score0.00237EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.21 views

WordPress Pocket News Generator Plugin <= 0.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Pocket News Generator Type Plugin Vulnerable versions = 0.2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2963 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 560f4a5e6385 Credits Benedictus Jovan...

4.8CVSS5.8AI score0.00322EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/28 12:0 a.m.21 views

WordPress Social Icons Widget & Block by WPZOOM Plugin <= 4.2.15 is vulnerable to Broken Access Control

Software Social Icons Widget & Block by WPZOOM Type Plugin Vulnerable versions = 4.2.15 Fixed in 4.2.16 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30464 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 49894ab6e8af Credits Rafie...

8.8CVSS6.6AI score0.01517EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/28 12:0 a.m.21 views

WordPress Finale Lite Plugin <= 2.18.0 is vulnerable to Remote Code Execution (RCE)

Software Finale Lite Type Plugin Vulnerable versions = 2.18.0 Fixed in 2.18.1 OWASP Top 10 A1: Broken Access Control Classification Remote Code Execution RCE CVE CVE-2024-30485 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 351260d95e05 Credits Yudistira Arya Required...

8.8CVSS6.9AI score0.01038EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2024/03/28 12:0 a.m.21 views

WordPress OSS Aliyun Plugin <= 1.4.10 is vulnerable to SQL Injection

Software OSS Aliyun Type Plugin Vulnerable versions = 1.4.10 Fixed in 1.4.11 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30494 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID f4acc3b1af32 Credits Majed Refaea Required privilege Administrator...

7.6CVSS6.8AI score0.00515EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/28 12:0 a.m.21 views

WordPress Geo Controller Plugin <= 8.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Geo Controller Type Plugin Vulnerable versions = 8.6.4 Fixed in 8.6.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30451 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e663f7c5a611 Credits LVT-tholv2k Required privilege...

6.5CVSS6.6AI score0.00351EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/28 12:0 a.m.21 views

WordPress SellKit Plugin <= 1.8.1 is vulnerable to Arbitrary File Download

Software SellKit Type Plugin Vulnerable versions = 1.8.1 Fixed in 1.8.3 OWASP Top 10 A5: Security Misconfiguration Classification Arbitrary File Download CVE CVE-2024-30509 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 931911cd5460 Credits stealthcopter Required...

6.5CVSS6.5AI score0.00623EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/28 12:0 a.m.21 views

WordPress WPCS Plugin <= 1.2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software WPCS Type Plugin Vulnerable versions = 1.2.0.1 Fixed in 1.2.0.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-30456 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 88357d12cef3 Credits Dhabaleshwar Das Required...

8.8CVSS6.6AI score0.00241EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/26 12:0 a.m.21 views

WordPress ARMember Plugin <= 4.0.26 is vulnerable to PHP Object Injection

Software ARMember Type Plugin Vulnerable versions = 4.0.26 Fixed in 4.0.27 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-30223 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 8d16e0b0481c Credits LVT-tholv2k Required privilege Unauthenticated...

9.8CVSS6.8AI score0.00645EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/25 12:0 a.m.21 views

WordPress Youzify Buddypress Moderation Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Youzify Buddypress Moderation Type Plugin Vulnerable versions = 1.2.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-2864 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID 8372e235157d Credits Esteban Segura Ripoll...

7.3CVSS6.8AI score0.00351EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/03/25 12:0 a.m.21 views

WordPress WordPress Meta Data and Taxonomies Filter (MDTF) Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Meta Data and Taxonomies Filter MDTF Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.3.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29763 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 835f8f6375ea Credits...

7.1CVSS6.8AI score0.00421EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/21 12:0 a.m.21 views

WordPress Avada Theme <= 7.11.6 is vulnerable to SQL Injection

Software Avada Type Theme Vulnerable versions = 7.11.6 Fixed in 7.11.7 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-2344 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 15fee136284a Credits Muhammad Zeeshan Xib3rR4dAr Required privilege Administrato...

7.2CVSS7.2AI score0.00828EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2024/03/19 12:0 a.m.21 views

WordPress PowerPack Lite for Beaver Builder Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software PowerPack Lite for Beaver Builder Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.0.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2289 Patch priority Low CVSS severity Low 6.5 Developer IdeaBox Creations PSID 9d2284f4a282 Credits...

6.4CVSS5.8AI score0.0034EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/03/19 12:0 a.m.21 views

WordPress Backup Bolt Plugin <= 1.3.0 is vulnerable to Sensitive Data Exposure

Software Backup Bolt Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.4.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-7236 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID dd36f15c489e Credits Dmitrii Ignatyev Required...

6.5AI score0.0055EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2024/03/16 12:0 a.m.21 views

WordPress Coupon Affiliates Plugin <= 5.12.7 is vulnerable to Cross Site Scripting (XSS)

Software Coupon Affiliates Type Plugin Vulnerable versions = 5.12.7 Fixed in 5.12.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29125 Patch priority Medium CVSS severity Medium 7.1 Developer RelyWP PSID 81253acd1aca Credits stealthcopter Required privilege...

7.1CVSS6.5AI score0.00402EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/14 12:0 a.m.21 views

WordPress Play.ht Plugin <= 3.6.4 is vulnerable to Broken Access Control

Software Play.ht Type Plugin Vulnerable versions = 3.6.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0828 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID efb5c07e09ff Credits Francesco Carlucci Required privilege...

6.3CVSS6.9AI score0.00362EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/13 12:0 a.m.21 views

WordPress Team Circle Image Slider With Lightbox Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Team Circle Image Slider With Lightbox Type Plugin Vulnerable versions = 1.0 Fixed in 1.0.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2015-10130 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4e4875511ed9 Credit...

5.3CVSS6.6AI score0.00202EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/03/05 12:0 a.m.21 views

WordPress File Manager Plugin <= 7.2.1 is vulnerable to Path Traversal

Software File Manager Type Plugin Vulnerable versions = 7.2.1 Fixed in 7.2.2 OWASP Top 10 A4: Insecure Design Classification Path Traversal CVE CVE-2023-6825 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID 7f2548079631 Credits Tobias Weißhaar kun19 Required privilege...

9.9CVSS9.3AI score0.06009EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/02/26 12:0 a.m.21 views

WordPress User Shortcodes Plus Plugin <= 2.0.2 is vulnerable to Insecure Direct Object References (IDOR)

Software User Shortcodes Plus Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-6969 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cc1bdd35256f Credits Francesco...

5.3CVSS6.5AI score0.00472EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/02/26 12:0 a.m.21 views

WordPress Elementor Pro Plugin <= 3.19.2 is vulnerable to Sensitive Data Exposure

Software Elementor Pro Type Plugin Vulnerable versions = 3.19.2 Fixed in 3.19.3 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-23523 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b4d0340c1078 Credits Dynamic.ooo Team Required...

6.5CVSS6.5AI score0.00529EPSS
SaveExploits0References2Affected Software1
Total number of security vulnerabilities5000