VYPR

CVEs

131,161 total · page 1140 of 2,624

AllCriticalHighKEV
  • CVE-2024-54324HigDec 13, 2024
    WordPress
    Smsify
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mtomic SMSify smsify allows Reflected XSS.This issue affects SMSify: from n/a through <= 6.0.4.

  • CVE-2024-54322HigDec 13, 2024
    Ederson Peka
    Media Downloader
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ederson Peka Media Downloader media-downloader allows Reflected XSS.This issue affects Media Downloader: from n/a through <= 0.4.7.4.

  • CVE-2024-54320HigDec 13, 2024
    Icdsoft
    ICDSoft Reseller Store
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icdsoft ICDSoft Reseller Store icdsoft-reseller-store allows Reflected XSS.This issue affects ICDSoft Reseller Store: from n/a through <= 2.4.5.

  • CVE-2024-54319HigDec 13, 2024
    WordPress
    Kundgenerator
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kundgenerator Kundgenerator kundgenerator allows Reflected XSS.This issue affects Kundgenerator: from n/a through <= 1.0.6.

  • CVE-2024-54312HigDec 13, 2024
    WordPress
    Persian Woocommerce Sms
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows Reflected XSS.This issue affects Persian Woocommerce SMS: from n/a through <= 7.0.5.

  • CVE-2024-54305HigDec 13, 2024
    J&T Express Malaysia
    jt-express
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jtexpress J&T Express Malaysia jt-express allows Reflected XSS.This issue affects J&T Express Malaysia: from n/a through <= 2.0.13.

  • CVE-2024-54304HigDec 13, 2024
    WordPress
    Hive Support
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hive Support Hive Support hive-support allows SQL Injection.This issue affects Hive Support: from n/a through <= 1.1.2.

  • CVE-2024-54303HigDec 13, 2024
    WordPress
    Simple Payment
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through <= 2.3.8.

  • CVE-2024-54302HigDec 13, 2024
    WordPress
    VPSUForm
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VPSUForm v-form allows Reflected XSS.This issue affects VPSUForm: from n/a through <= 3.0.0.

  • CVE-2024-54301HigDec 13, 2024
    Formfacade
    Formfacade
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in manidoraisamy FormFacade formfacade allows Reflected XSS.This issue affects FormFacade: from n/a through <= 1.3.6.

  • CVE-2024-54299HigDec 13, 2024
    Redev
    revi-io-customer-and-product-reviews
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in revidev Revi.io revi-io-customer-and-product-reviews allows Reflected XSS.This issue affects Revi.io: from n/a through <= 5.7.3.

  • CVE-2024-54290HigDec 13, 2024
    WordPress
    Role Includer
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Fletcher Role Includer role-includer allows Reflected XSS.This issue affects Role Includer: from n/a through <= 1.6.

  • CVE-2024-54288HigDec 13, 2024
    WordPress
    LDD Directory Lite
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LDD Web Design LDD Directory Lite ldd-directory-lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through <= 3.3.

  • CVE-2024-54282HigDec 13, 2024
    WordPress
    Wp Megamenu
    risk 0.47cvss 7.2epss 0.01

    Deserialization of Untrusted Data vulnerability in Themeum WP Mega Menu wp-megamenu allows Object Injection.This issue affects WP Mega Menu: from n/a through <= 1.4.2.

  • CVE-2024-54275HigDec 13, 2024
    WordPress
    CSV To HTML
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wibergsweb CSV to html csv-to-html allows Reflected XSS.This issue affects CSV to html: from n/a through <= 3.08.

  • CVE-2024-54274HigDec 13, 2024
    WordPress
    Octrace Support
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Octrace WordPress HelpDesk & Support Ticket System Plugin – Octrace Support octrace-support allows Reflected XSS.This issue affects WordPress HelpDesk & Support Ticket System…

  • CVE-2024-54266HigDec 13, 2024
    Imagerecycle
    Imagerecycle Pdf \& Image Compression
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ImageRecycle ImageRecycle pdf & image compression imagerecycle-pdf-image-compression allows Reflected XSS.This issue affects ImageRecycle pdf & image compression: from n/a…

  • CVE-2024-54265HigDec 13, 2024
    Dmitry V. (CEO of "UKR Solution")
    Barcode Scanner with Inventory & Order Manager
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Reflected XSS.This issue…

  • CVE-2024-54264HigDec 13, 2024
    WordPress
    Shortcodes Blocks Creator Ultimate
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmorillas1 Shortcodes Blocks Creator Ultimate ultimate-shortcodes-creator allows Reflected XSS.This issue affects Shortcodes Blocks Creator Ultimate: from n/a through <= 2.2.0.

  • CVE-2024-54258HigDec 13, 2024
    WordPress
    Ni CRM Lead
    risk 0.55cvss 8.5epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Anzar Ahmed Ni CRM Lead ni-crm-lead allows SQL Injection.This issue affects Ni CRM Lead: from n/a through <= 1.3.0.

  • CVE-2024-54256HigDec 13, 2024
    WordPress
    Easy Blocks Pro
    risk 0.46cvss 7.1epss 0.01

    Missing Authorization vulnerability in Seerox Easy Blocks pro easy-blocks-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Easy Blocks pro: from n/a through <= 1.0.21.

  • CVE-2024-54248HigDec 13, 2024
    WordPress
    Eewee Admincustom
    risk 0.57cvss 8.8epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in eewee eewee admin custom eewee-admincustom allows Privilege Escalation.This issue affects eewee admin custom: from n/a through <= 1.8.2.4.

  • CVE-2024-54240HigDec 13, 2024
    Blazeonline
    Blaze Online eParcel for WooCommerce
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blazeonline Blaze Online eParcel for WooCommerce blaze-online-eparcel-for-woocommerce allows Reflected XSS.This issue affects Blaze Online eParcel for WooCommerce: from n/a…

  • CVE-2024-54238HigDec 13, 2024
    Cleveland Heights-University Heights Public Library
    Board Document Manager from CHUHPL
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cleveland Heights-University Heights Public Library Webdeveloper Board Document Manager from CHUHPL board-document-manager-from-chuhpl allows Reflected XSS.This issue affects…

  • CVE-2024-54237HigDec 13, 2024
    WordPress
    Ni CRM Lead
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni CRM Lead ni-crm-lead allows Reflected XSS.This issue affects Ni CRM Lead: from n/a through <= 1.3.0.

  • CVE-2024-54236HigDec 13, 2024
    WordPress
    Ni Woocommerce Product Editor
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Bulk Product Editor ni-woocommerce-product-editor allows Reflected XSS.This issue affects Ni WooCommerce Bulk Product Editor: from n/a through <=…

  • CVE-2024-54235HigDec 13, 2024
    WordPress
    Shiptimize For Woocommerce
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shiptimize Shiptimize for WooCommerce shiptimize-for-woocommerce allows Reflected XSS.This issue affects Shiptimize for WooCommerce: from n/a through <= 3.1.86.

  • CVE-2024-54233HigDec 13, 2024
    WordPress
    Advanced Control Manager
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in overclokk Advanced Control Manager for WordPress by ItalyStrap advanced-control-manager allows Reflected XSS.This issue affects Advanced Control Manager for WordPress by…

  • CVE-2024-54231HigDec 13, 2024
    Anzar Ahmed Ni
    Ni WooCommerce Order Export
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Order Export ni-woocommerce-order-export allows Reflected XSS.This issue affects Ni WooCommerce Order Export: from n/a through <= 3.1.6.

  • CVE-2023-41130HigDec 13, 2024
    WordPress
    Premmerce User Roles
    risk 0.53cvss 8.1epss 0.01

    Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through <= 1.0.12.

  • CVE-2023-39920HigDec 13, 2024
    WordPress
    Redirection for Contact Form 7
    risk 0.49cvss 7.5epss 0.01

    Missing Authorization vulnerability in Themeisle Redirection for Contact Form 7 wpcf7-redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Redirection for Contact Form 7: from n/a through <= 2.9.2.

  • CVE-2023-38385HigDec 13, 2024
    WordPress
    Jupiterx Core
    risk 0.54cvss 8.3epss 0.01

    Missing Authorization vulnerability in Artbees JupiterX Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JupiterX Core: from 3.0.0 through 3.3.0.

  • CVE-2023-36510HigDec 13, 2024
    WordPress
    Redi Restaurant Reservation
    risk 0.47cvss 7.3epss 0.01

    Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReDi Restaurant Reservation: from n/a through 23.0211.

  • CVE-2023-35037HigDec 13, 2024
    WordPress
    Surferseo
    risk 0.49cvss 7.6epss 0.01

    Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <= 1.3.2.357.

  • CVE-2023-33996HigDec 13, 2024
    Cleantalk
    Spam Protection, Antispam, Firewall By Cleantalk
    risk 0.57cvss 8.8epss 0.01

    Missing Authorization vulnerability in СleanTalk - Anti-Spam Protection Spam protection, AntiSpam, FireWall by CleanTalk allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spam protection, AntiSpam, FireWall by CleanTalk: from n/a through…

  • CVE-2023-32585HigDec 13, 2024
    WordPress
    Portfolio Responsive Gallery
    risk 0.49cvss 7.5epss 0.01

    Missing Authorization vulnerability in Total-Soft Portfolio Gallery – Responsive Image Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Portfolio Gallery – Responsive Image Gallery: from n/a through 1.4.6.

  • CVE-2023-32520HigDec 13, 2024
    WordPress
    Wcp Contact Form
    risk 0.49cvss 7.5epss 0.01

    Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0.

  • CVE-2023-32507HigDec 13, 2024
    WordPress
    Woo Custom Emails
    risk 0.47cvss 7.3epss 0.01

    Missing Authorization vulnerability in wp3sixty Woo Custom Emails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Custom Emails: from n/a through 2.2.

  • CVE-2023-30490HigDec 13, 2024
    WordPress
    Easing Slider
    risk 0.49cvss 7.5epss 0.01

    Missing Authorization vulnerability in Matthew Ruddy Easing Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easing Slider : from n/a through 3.0.8.

  • CVE-2023-25988HigDec 13, 2024
    WordPress
    Youtube Video Gallery
    risk 0.49cvss 7.5epss 0.01

    Missing Authorization vulnerability in Video Gallery by Total-Soft Video Gallery – YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Video Gallery – YouTube Gallery: from n/a through 1.7.6.

  • CVE-2024-22461HigDec 13, 2024
    Dell
    Recoverpoint For Virtual Machines
    risk 0.57cvss 8.8epss 0.01

    Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system.

  • CVE-2024-52066HigDec 13, 2024
    Rti
    Connext Professional
    risk 0.51cvss 7.8epss 0.00

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before…

  • CVE-2024-52065HigDec 13, 2024
    Rti
    Connext Professional
    risk 0.46cvss 7.1epss 0.00

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional on non-Windows (Persistence Service) allows Buffer Overflow via Environment Variables.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.1.2…

  • CVE-2024-52064HigDec 13, 2024
    Rti
    Connext Professional
    risk 0.46cvss 7.1epss 0.00

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.21, from 6.0.0 before…

  • CVE-2024-52063HigDec 13, 2024
    Rti
    Connext Professional
    risk 0.56cvss 8.6epss 0.00

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21,…

  • CVE-2024-52062HigDec 13, 2024
    Rti
    Connext Professional
    risk 0.51cvss 7.8epss 0.00

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before…

  • CVE-2024-52060HigDec 13, 2024
    Rti
    Connext Professional
    risk 0.51cvss 7.8epss 0.00

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Service) allows Buffer Overflow via Environment Variables.This…

  • CVE-2024-52059HigDec 13, 2024
    Rti
    Connext Professional
    risk 0.51cvss 7.8epss 0.00

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.0.0…

  • CVE-2024-52058HigDec 13, 2024
    Rti
    Connext Professional
    risk 0.51cvss 7.8epss 0.01

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in RTI Connext Professional (System Designer) allows OS Command Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.19.

  • CVE-2024-10783HigDec 13, 2024
    WordPress
    Mainwp Child
    risk 0.53cvss 8.1epss 0.02

    The MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites plugin for WordPress is vulnerable to privilege escalation due to a missing authorization checks on the register_site function in all versions up to, and including, 5.2 when a site is left in…