Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Wordfence Intelligence Weekly WordPress Vulnerability Report (April 22, 2024 to April 28, 2024)

🗓️ 02 May 2024 14:49:19Reported by Chloe ChamberlandType 
wordfence
 wordfence🔗 www.wordfence.com👁 182 Views

Wordfence weekly WordPress vulnerability report April 22-28, 2024. 285 vulnerabilities disclosed in 223 plugins and 22 themes. Free access to vulnerability data via user interface, API, webhook, and CLI scanner

Related
ReporterTitlePublishedViews
Family
0day.today		Wordpress Theme XStore 9.3.8 - SQL injection Vulnerability
19 May 202400:00
–zdt
Vulnrichment		CVE-2024-33587 WordPress Secure Copy Content Protection and Content Locking plugin <= 3.9.0 - Broken Access Control vulnerability
29 Apr 202412:40
–vulnrichment
Vulnrichment		CVE-2024-33588 WordPress basepress plugin <= 2.16.1 - Broken Access Control vulnerability
29 Apr 202412:39
–vulnrichment
Vulnrichment		CVE-2024-33589 WordPress KB Support plugin <= 1.6.0 - Broken Access Control vulnerability
29 Apr 202410:15
–vulnrichment
Vulnrichment		CVE-2024-33590 WordPress basepress plugin <= 2.16.1 - Server Side Request Forgery (SSRF) vulnerability
29 Apr 202410:14
–vulnrichment
Vulnrichment		CVE-2024-33591 WordPress Easy Accept Payments for PayPal plugin <= 4.9.10 - Broken Access Control vulnerability
29 Apr 202410:10
–vulnrichment
Vulnrichment		CVE-2024-33592 WordPress Radio Player plugin <= 2.0.73 - Server Side Request Forgery (SSRF) vulnerability
25 Apr 202414:52
–vulnrichment
Vulnrichment		CVE-2024-33593 WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability
29 Apr 202410:09
–vulnrichment
Vulnrichment		CVE-2024-33594 WordPress Leaky Paywall plugin <= 4.20.8 - Price Manipulation vulnerability
29 Apr 202410:07
–vulnrichment
Vulnrichment		CVE-2024-33595 WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on Duplicate Post vulnerability
29 Apr 202409:16
–vulnrichment
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
02 May 2024 14:49Current
9.1High risk
Vulners AI Score9.1
EPSS0.05851
wordpressvulnerabilitydatabaseapiwebhookcli scannercveseveritybug bountysecurity
182