VYPR
← WordPress

Vendor CVEs

WordPress

All CVEs

40,358 total · sorted by risk
  • CVE-2024-11770MedDec 14, 2024
    WordPress
    Post Carousel Slider
    risk 0.42cvss 6.4epss 0.00

    The Post Carousel & Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'post-cs' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

  • CVE-2024-11759MedDec 14, 2024
    WordPress
    Bukza
    risk 0.42cvss 6.4epss 0.00

    The Bukza plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bukza' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…

  • CVE-2024-11755MedDec 14, 2024
    WordPress
    Ims Countdown
    risk 0.42cvss 6.4epss 0.00

    The IMS Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown post settings in all versions up to, and including, 1.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…

  • CVE-2024-11751MedDec 14, 2024
    WordPress
    Tcbd Popover
    risk 0.42cvss 6.4epss 0.00

    The TCBD Popover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbd-popover-image ' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

  • CVE-2024-11095MedDec 14, 2024
    WordPress
    Visualmodo Elements
    risk 0.42cvss 6.4epss 0.00

    The Visualmodo Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…

  • CVE-2024-54349MedDec 13, 2024
    WordPress
    Plain Post
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mashiurz Plain Post plain-post allows Stored XSS.This issue affects Plain Post: from n/a through <= 1.0.3.

  • CVE-2024-54346MedDec 13, 2024
    WordPress
    Barter
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 Barter barter allows DOM-Based XSS.This issue affects Barter: from n/a through <= 1.6.

  • CVE-2024-54345MedDec 13, 2024
    WordPress
    Bicycleshop
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 Bicycleshop bicycleshop allows DOM-Based XSS.This issue affects Bicycleshop: from n/a through <= 1.5.

  • CVE-2024-54338MedDec 13, 2024
    WordPress
    Hello Event Widgets For Elementor
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in christer_f Hello Event Widgets For Elementor hello-event-widgets-for-elementor allows DOM-Based XSS.This issue affects Hello Event Widgets For Elementor: from n/a through <=…

  • CVE-2024-54334MedDec 13, 2024
    WordPress
    Quran Phrases About Most People Shortcodes
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zeshanb Quran Phrases About Most People Shortcodes quran-phrases-about-most-people-shortcodes allows DOM-Based XSS.This issue affects Quran Phrases About Most People Shortcodes:…

  • CVE-2024-54326MedDec 13, 2024
    WordPress
    GEO my WordPress
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GEO my WordPress: from n/a through <= 4.5.0.4.

  • CVE-2024-54318MedDec 13, 2024
    NiceJob
    nicejob
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through <= 3.6.5.

  • CVE-2024-54317MedDec 13, 2024
    Google
    Web Stories
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Google Web Stories web-stories allows Stored XSS.This issue affects Web Stories: from n/a through <= 1.37.0.

  • CVE-2024-54316MedDec 13, 2024
    Nicheaddons
    Restaurant \& Cafe Addon For Elementor
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows DOM-Based XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a…

  • CVE-2024-54315MedDec 13, 2024
    Nicheaddons
    Events Addon For Elementor
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through <= 2.2.2.

  • CVE-2024-54314MedDec 13, 2024
    Nicheaddons
    Primary Addon For Elementor
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Primary Addon for Elementor primary-addon-for-elementor allows Stored XSS.This issue affects Primary Addon for Elementor: from n/a through <= 1.6.0.

  • CVE-2024-54313MedDec 13, 2024
    WordPress
    Full Customer
    risk 0.42cvss 6.5epss 0.01

    Path Traversal vulnerability in FULL. FULL Customer allows Path Traversal.This issue affects FULL Customer: from n/a through 3.1.25.

  • CVE-2024-54309MedDec 13, 2024
    WordPress
    Postbox Email Logs
    risk 0.42cvss 6.5epss 0.01

    Insertion of Sensitive Information Into Sent Data vulnerability in wpdebuglog PostBox postbox-email-logs allows Retrieve Embedded Sensitive Data.This issue affects PostBox: from n/a through <= 1.0.4.

  • CVE-2024-54289MedDec 13, 2024
    WordPress
    Awesome Support
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Support: from n/a through <= 6.3.1.

  • CVE-2024-54287MedDec 13, 2024
    WordPress
    Advanced Blog Post Block
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Best WP Developer Advanced Blog Post Block advanced-blog-post-block allows Stored XSS.This issue affects Advanced Blog Post Block: from n/a through <= 1.0.4.

  • CVE-2024-54286MedDec 13, 2024
    WordPress
    Smaily For Wp
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Smaily Smaily for WP smaily-for-wp allows Stored XSS.This issue affects Smaily for WP: from n/a through <= 3.1.5.

  • CVE-2024-54277MedDec 13, 2024
    WordPress
    Nias Course
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alireza Aliniya Nias course nias-course allows DOM-Based XSS.This issue affects Nias course: from n/a through <= 1.2.10.

  • CVE-2024-54276MedDec 13, 2024
    WordPress
    Poll Builder
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devfelixmoira Poll Builder poll-builder allows Stored XSS.This issue affects Poll Builder: from n/a through <= 1.3.5.

  • CVE-2024-54272MedDec 13, 2024
    WordPress
    Radius Blocks
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Radius Blocks radius-blocks allows Stored XSS.This issue affects Radius Blocks: from n/a through <= 2.1.2.

  • CVE-2024-54259MedDec 13, 2024
    WordPress
    Delucks Seo
    risk 0.42cvss 6.5epss 0.01

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Path Traversal.This issue affects DELUCKS SEO: from n/a through <= 2.7.0.

  • CVE-2024-54250MedDec 13, 2024
    WordPress
    Prodigy Commerce
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prodigycommerce Prodigy Commerce prodigy-commerce allows DOM-Based XSS.This issue affects Prodigy Commerce: from n/a through <= 3.0.8.

  • CVE-2024-54246MedDec 13, 2024
    WordPress
    Faqs
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 FAQs faqs allows Stored XSS.This issue affects FAQs: from n/a through <= 1.0.2.

  • CVE-2024-54245MedDec 13, 2024
    WordPress
    Clients
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Clients clients allows Stored XSS.This issue affects Clients: from n/a through <= 1.1.4.

  • CVE-2024-54244MedDec 13, 2024
    WordPress
    Easy Replace
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Easy Replace easy-replace allows Stored XSS.This issue affects Easy Replace: from n/a through <= 1.3.

  • CVE-2024-54243MedDec 13, 2024
    WordPress
    Echoza
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Echoza echoza allows Stored XSS.This issue affects Echoza: from n/a through <= 0.1.1.

  • CVE-2024-54242MedDec 13, 2024
    WordPress
    Simple Notification
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Notification: from n/a through <= 1.3.

  • CVE-2024-54241MedDec 13, 2024
    WordPress
    Elite Notification
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elite Notification – Sales Popup, Social Proof, FOMO &…

  • CVE-2023-41686MedDec 13, 2024
    WordPress
    Woocommerce Support System
    risk 0.42cvss 6.5epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in ilGhera Woocommerce Support System allows Cross Site Request Forgery.This issue affects Woocommerce Support System: from n/a through 1.2.2.

  • CVE-2023-41664MedDec 13, 2024
    WordPress
    Easy Newsletter Signups
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in AlphaBPO Easy Newsletter Signups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Newsletter Signups: from n/a through 1.0.4.

  • CVE-2023-41649MedDec 13, 2024
    WordPress
    Ovic Product Bundle
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in Ovic Team Ovic Product Bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovic Product Bundle: from n/a through 1.1.2.

  • CVE-2023-40003MedDec 13, 2024
    Leevio
    WP Project Manager
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in weDevs WP Project Manager wedevs-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Project Manager: from n/a through <= 2.6.7.

  • CVE-2023-37987MedDec 13, 2024
    WordPress
    YourMembership Single Sign On
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in miniOrange YourMembership Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YourMembership Single Sign On: from n/a through 1.1.3.

  • CVE-2023-37971MedDec 13, 2024
    WordPress
    Woocommerce Product Stock Alert
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Product Stock Alert: from n/a through 2.0.1.

  • CVE-2023-37967MedDec 13, 2024
    Designinvento
    Directorypress
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through 3.6.2.

  • CVE-2023-37887MedDec 13, 2024
    WordPress
    Wpschoolpress
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in WPSchoolPress Team WPSchoolPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSchoolPress: from n/a through 2.2.7.

  • CVE-2023-34019MedDec 13, 2024
    WordPress
    Uncanny Toolkit For Learndash
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.6.4.3.

  • CVE-2023-33994MedDec 13, 2024
    WordPress
    Slimstat Analytics
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in VeronaLabs Slimstat Analytics wp-slimstat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slimstat Analytics: from n/a through <= 5.0.5.1.

  • CVE-2023-33324MedDec 13, 2024
    WordPress
    Easy Captcha
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in wppal Easy Captcha allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Captcha: from n/a through 1.0.

  • CVE-2023-32506MedDec 13, 2024
    WordPress
    Link Whisper Free
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Link Whisper Link Whisper Free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through 0.6.3.

  • CVE-2022-47594MedDec 13, 2024
    Wpdeveloper
    Essential Blocks
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 3.8.5.

  • CVE-2022-46796MedDec 13, 2024
    WordPress
    CURCY
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in VillaTheme CURCY allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.1.25.

  • CVE-2022-46795MedDec 13, 2024
    WordPress
    Print Invoice & Delivery Notes for WooCommerce
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.7.2.

  • CVE-2022-45840MedDec 13, 2024
    WordPress
    Auto Affiliate Links
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Affiliate Links: from n/a through 6.2.1.5.

  • CVE-2024-11827MedDec 13, 2024
    WordPress
    Out of the Block: OpenStreetMap
    risk 0.42cvss 6.4epss 0.00

    The Out of the Block: OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ootb_query shortcode in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This…

  • CVE-2024-12465MedDec 13, 2024
    WordPress
    Property Hive Stamp Duty Calculator
    risk 0.42cvss 6.4epss 0.00

    The Property Hive Stamp Duty Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stamp_duty_calculator_scotland' shortcode in all versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping on user…

Page 353 of 808