CVE-2024-10571

The Chartify – WordPress Chart Plugin is vulnerable to Local File Inclusion (LFI) in all versions up to and including 2.9.5 . The flaw exists in the 'source' parameter , which allows unauthenticated attackers to include and execute arbitrary files on the server. This can lead to the execution of ...

CVE-2023-47526

CVE-2023-47526 is a stored XSS vulnerability in the WordPress plugin Chartify (Chart Builder) vulnerable in versions = 2.0.7 or apply vendor-provided patches. If upgrading is not feasible, monitor for official advisories and consider mitigating through plugin removal or disabling affected feature...