VYPR
← WordPress

Vendor CVEs

WordPress

All CVEs

40,358 total · sorted by risk
  • CVE-2022-45830MedJan 2, 2025
    WordPress
    Analytify
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Analytify.This issue affects Analytify: from n/a through 4.2.3.

  • CVE-2024-56268MedJan 2, 2025
    WordPress
    Post Grid Elementor Addon
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hookandhook Post Grid Elementor Addon post-grid-elementor-addon.This issue affects Post Grid Elementor Addon: from n/a through <= 2.0.18.

  • CVE-2024-56257MedJan 2, 2025
    WordPress
    Coins Marketcap
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolPlugins Coins MarketCap coins-marketcap allows DOM-Based XSS.This issue affects Coins MarketCap: from n/a through <= 5.5.8.

  • CVE-2024-56302MedJan 2, 2025
    WordPress
    Convertcalculator
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jorisderuiter ConvertCalculator for WordPress convertcalculator allows Stored XSS.This issue affects ConvertCalculator for WordPress: from n/a through <= 1.1.1.

  • CVE-2024-56263MedJan 2, 2025
    WordPress
    GS Shots for Dribbble
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Shots for Dribbble gs-dribbble-portfolio allows DOM-Based XSS.This issue affects GS Shots for Dribbble: from n/a through <= 1.2.0.

  • CVE-2024-56262MedJan 2, 2025
    WordPress
    GS Coaches
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Coaches gs-coach allows Stored XSS.This issue affects GS Coaches: from n/a through <= 1.1.0.

  • CVE-2024-56261MedJan 2, 2025
    WordPress
    Project Showcase
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins Project Showcase gs-projects allows Stored XSS.This issue affects Project Showcase: from n/a through <= 1.1.1.

  • CVE-2024-56260MedJan 2, 2025
    WordPress
    Shopelement
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StorePlugin ShopElement shopelement allows Stored XSS.This issue affects ShopElement: from n/a through <= 2.0.0.

  • CVE-2024-56259MedJan 2, 2025
    Ayecode
    Geodirectory
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.84.

  • CVE-2024-56258MedJan 2, 2025
    WordPress
    Magazine Blocks
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlockArt Magazine Blocks magazine-blocks allows Stored XSS.This issue affects Magazine Blocks: from n/a through <= 1.3.20.

  • CVE-2024-56254MedJan 2, 2025
    Moveaddons
    Move Addons For Elementor
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through <= 1.3.6.

  • CVE-2024-56252MedJan 2, 2025
    Themelooks
    Enter Addons
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelooks Enter Addons enteraddons allows Stored XSS.This issue affects Enter Addons: from n/a through <= 2.1.9.

  • CVE-2024-56246MedJan 2, 2025
    Posimyth
    Nexter Blocks
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows DOM-Based XSS.This issue affects Nexter Blocks: from n/a through <= 4.0.4.

  • CVE-2024-56245MedJan 2, 2025
    WordPress
    Premium Blocks For Gutenberg
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Blocks – Gutenberg Blocks for WordPress premium-blocks-for-gutenberg allows Stored XSS.This issue affects Premium Blocks – Gutenberg Blocks for WordPress:…

  • CVE-2024-56242MedJan 2, 2025
    Tychesoftwares
    Arconix Shortcodes
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through <= 2.1.14.

  • CVE-2024-56241MedJan 2, 2025
    WordPress
    Wpkoi Templates For Elementor
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Stored XSS.This issue affects WPKoi Templates for Elementor: from n/a through <= 3.1.3.

  • CVE-2024-56240MedJan 2, 2025
    WordPress
    Pronamic Google Maps
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pronamic Pronamic Google Maps pronamic-google-maps allows Stored XSS.This issue affects Pronamic Google Maps: from n/a through <= 2.3.2.

  • CVE-2024-56239MedJan 2, 2025
    WordPress
    Themify Audio Dock
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Audio Dock themify-audio-dock allows Stored XSS.This issue affects Themify Audio Dock: from n/a through <= 2.0.4.

  • CVE-2024-38790MedJan 2, 2025
    WordPress
    Smartsupp
    risk 0.42cvss 6.5epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Smartsupp Smartsupp – live chat, chatbots, AI and lead generation smartsupp-live-chat allows Cross Site Request Forgery.This issue affects Smartsupp – live chat, chatbots, AI and lead generation: from n/a through <= 3.6.

  • CVE-2023-47689MedJan 2, 2025
    WordPress
    Animator
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Toast Plugins Animator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animator: from n/a through 3.0.10.

  • CVE-2023-47180MedJan 2, 2025
    Xlplugins
    Finale
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in XLPlugins Finale Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Finale Lite: from n/a through 2.16.0.

  • CVE-2023-46644MedJan 2, 2025
    WordPress
    WordPress CTA
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in WP CTA PRO WordPress CTA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress CTA: from n/a through 1.5.8.

  • CVE-2023-46631MedJan 2, 2025
    WordPress
    Product Recommendation Quiz For Ecommerce
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in RevenueHunt Product Recommendation Quiz for eCommerce product-recommendation-quiz-for-ecommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Recommendation Quiz for eCommerce: from n/a…

  • CVE-2023-46610MedJan 2, 2025
    WordPress
    Quill Forms
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Mohamed Magdy Quill Forms quillforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quill Forms: from n/a through <= 3.3.0.

  • CVE-2023-46609MedJan 2, 2025
    WordPress
    Feedfocal
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in FeedFocal FeedFocal feedfocal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FeedFocal: from n/a through <= 1.2.2.

  • CVE-2023-46195MedJan 2, 2025
    WordPress
    Headline Analyzer
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Headline Analyzer: from n/a through <= 1.3.1.

  • CVE-2023-45275MedJan 2, 2025
    WordPress
    Kali Forms
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through <= 2.3.28.

  • CVE-2024-56019MedJan 2, 2025
    WordPress
    Inline Footnotes
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gavinr Inline Footnotes inline-footnotes allows Stored XSS.This issue affects Inline Footnotes: from n/a through <= 2.3.0.

  • CVE-2024-56021MedJan 1, 2025
    WordPress
    Category Post Shortcode
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibnuyahya Category Post Shortcode category-post-shortcode allows Stored XSS.This issue affects Category Post Shortcode: from n/a through <= 2.4.

  • CVE-2024-56020MedJan 1, 2025
    WordPress
    Svegliat Buttons
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in svegliadesign SvegliaT Buttons svegliat-buttons allows Stored XSS.This issue affects SvegliaT Buttons: from n/a through <= 1.3.0.

  • CVE-2024-56063MedDec 31, 2024
    Wpdeveloper
    Essential Addons For Elementor
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.0.7.

  • CVE-2024-56062MedDec 31, 2024
    Royal Elementor Addons
    Royal Elementor Addons
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through <= 1.3.987.

  • CVE-2024-56002MedDec 31, 2024
    Mightyforms
    Contact Form, Survey & Form Builder – MightyForms
    risk 0.42cvss 6.4epss 0.00

    Missing Authorization vulnerability in mightyforms Contact Form, Survey & Form Builder – MightyForms mightyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form, Survey & Form Builder – MightyForms: from n/a through <=…

  • CVE-2024-55995MedDec 31, 2024
    Torod Company For Information Technology
    torod
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Torod Company for Information Technology Torod torod allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Torod: from n/a through <= 1.7.

  • CVE-2024-56031MedDec 31, 2024
    WordPress
    Smart Shopify Product
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Yulio Aleman Jimenez Smart Shopify Product smart-shopify-product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Shopify Product: from n/a through <= 1.0.2.

  • CVE-2024-55991MedDec 31, 2024
    WordPress
    Wp CRM System
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through <= 3.2.9.1.

  • CVE-2024-56235MedDec 31, 2024
    Vicky Kumar Coupon
    coupon-lite
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vicky Kumar Coupon coupon-lite allows DOM-Based XSS.This issue affects Coupon: from n/a through <= 1.2.2.

  • CVE-2024-56231MedDec 31, 2024
    WordPress
    Saaspricing
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Debuggers Studio SaasPricing saaspricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through <= 1.2.4.

  • CVE-2024-56224MedDec 31, 2024
    ledenbeheer
    ledenbeheer-external-connection
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ledenbeheer Ledenbeheer ledenbeheer-external-connection allows Stored XSS.This issue affects Ledenbeheer: from n/a through <= 2.1.0.

  • CVE-2024-56221MedDec 31, 2024
    WordPress
    Wpmozo Addons Lite For Elementor
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elicus WPMozo Addons Lite for Elementor wpmozo-addons-lite-for-elementor allows Stored XSS.This issue affects WPMozo Addons Lite for Elementor: from n/a through <= 1.2.0.

  • CVE-2024-56216MedDec 31, 2024
    Themify
    Builder
    risk 0.42cvss 6.5epss 0.00

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themifyme Themify Builder themify-builder allows PHP Local File Inclusion.This issue affects Themify Builder: from n/a through <= 7.6.3.

  • CVE-2024-56213MedDec 31, 2024
    Themewinter
    Eventin
    risk 0.42cvss 6.5epss 0.01

    Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.7.

  • CVE-2024-12428HigDec 25, 2024
    WordPress
    Wp Data Access
    risk 0.42cvss 7.5epss 0.00

    The WP Data Access – App, Table, Form and Chart Builder plugin plugin for WordPress is vulnerable to SQL Injection via the 'order[user_login][dir]' parameter in all versions up to, and including, 5.5.22 due to insufficient escaping on the user supplied parameter and lack of…

  • CVE-2024-10856MedDec 24, 2024
    Wpdevart
    Booking Calendar
    risk 0.42cvss 6.5epss 0.00

    The Booking Calendar WpDevArt plugin is vulnerable to time-based, blind SQL injection via the `id` parameter in the “wpdevart_booking_calendar” shortcode in versions up to, and including, 3.2.19 due to insufficient escaping on the user-supplied parameter and lack of…

  • CVE-2024-8721MedDec 24, 2024
    WordPress
    Tracking Code Manager
    risk 0.42cvss 6.4epss 0.00

    The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tracking code field in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…

  • CVE-2024-12031MedDec 24, 2024
    WordPress
    Advanced Floating Content
    risk 0.42cvss 6.5epss 0.00

    The Advanced Floating Content plugin for WordPress is vulnerable to SQL Injection via the 'floating_content_duplicate_post' function in all versions up to, and including, 3.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…

  • CVE-2024-11896MedDec 24, 2024
    WordPress
    Text Prompter
    risk 0.42cvss 6.4epss 0.00

    The Text Prompter – Unlimited chatgpt text prompts for openai tasks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'text_prompter' shortcode in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output…

  • CVE-2024-12814MedDec 24, 2024
    WordPress
    Loan Comparison
    risk 0.42cvss 6.4epss 0.00

    The Loan Comparison plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'loancomparison' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

  • CVE-2024-11885MedDec 24, 2024
    WordPress
    NinjaTeam Chat for Telegram
    risk 0.42cvss 6.4epss 0.00

    The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'njtele_button shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This…

  • CVE-2024-12507MedDec 24, 2024
    WordPress
    Optio Dentistry
    risk 0.42cvss 6.4epss 0.00

    The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

Page 351 of 808