Wordfence Intelligence Weekly WordPress Vulnerability Report (February 19, 2024 to February 25, 2024)

🗓️ 29 Feb 2024 17:09:15Reported by Chloe ChamberlandType

wordfence🔗 www.wordfence.com👁 45 Views

Wordfence Intelligence report on WordPress vulnerabilities from Feb 19 to Feb 25, 2024

Reporter	Title	Published	Views	Family All 1035
WPVulnDB	Advanced Social Feeds Widget & Shortcode <= 1.7 - Admin+ Stored XSS	20 Feb 202400:00	–	wpvulndb
WPVulnDB	Page Builder < 1.8.3 - Contributor+ Stored XSS	23 Feb 202400:00	–	wpvulndb
WPVulnDB	Archivist – Custom Archive Templates < 1.7.6 - Reflected Cross-Site Scripting	23 Feb 202400:00	–	wpvulndb
WPVulnDB	File Manager Pro < 8.3.5 - Reflected Cross-Site Scripting	20 Feb 202400:00	–	wpvulndb
WPVulnDB	Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Authenticated (Contributor+) PHP Object Injection	22 Feb 202400:00	–	wpvulndb
WPVulnDB	Maintenance Page < 1.0.9 - Security Mechanism Bypass via REST API	21 Feb 202400:00	–	wpvulndb
WPVulnDB	Admin side data storage for Contact Form 7 <= 1.1.1 - Cross-Site Request Forgery	22 Feb 202400:00	–	wpvulndb
WPVulnDB	Scalable Vector Graphics (SVG) <= 3.4 - Author+ Stored XSS via SVG	20 Feb 202400:00	–	wpvulndb
WPVulnDB	Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover	19 Feb 202400:00	–	wpvulndb
WPVulnDB	Cost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce < 3.2.9 - Reflected Cross-Site Scripting	20 Feb 202400:00	–	wpvulndb

29 Feb 2024 17:09Current

9.6High risk

Vulners AI Score9.6

EPSS0.89431

bug bounty vulnerability report wordpress security vulnerability database firewall rules