Vendor CVEs

WordPress

All CVEs

40,101 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-43159	Themegrill Masteriyo	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.
CVE-2024-43120	XSERVER Inc. TypeSquare Webfonts	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7.
CVE-2024-39654	WordPress Sign Up Sheets	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through <= 2.2.12.
CVE-2024-39625	WordPress Icegram	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24.
CVE-2024-38794	WordPress Custom Query Blocks	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Custom Query Blocks: from n/a through 5.2.0.
CVE-2024-38792	WordPress ConveyThis	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Language Translate Widget for WordPress – ConveyThis: from n/a through 234.
CVE-2024-38783	Tychesoftwares Arconix Faq	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix FAQ: from n/a through 1.9.4.
CVE-2024-38769	Tychesoftwares Arconix Shortcodes	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix Shortcodes: from n/a through 2.1.11.
CVE-2024-38748	Theinnovs Eleforms	Med	0.34	5.3	0.01	Nov 1, 2024	Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9.
CVE-2024-38745	WordPress Wholesale Suite	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Rymera Web Co Wholesale Suite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wholesale Suite: from n/a through 2.1.12.
CVE-2024-38743	WordPress Plum: Spin Wheel & Email Pop-up	Med	0.34	5.3	0.00	Nov 1, 2024	Access Control vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows . This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0.
CVE-2024-38702	WordPress Product Delivery Date For Woocommerce Lite	Med	0.34	5.3	0.01	Nov 1, 2024	Missing Authorization vulnerability in Tyche Softwares Product Delivery Date for WooCommerce – Lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.2.
CVE-2024-38690	WordPress iPanorama 360 – WordPress Virtual Tour Builder	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.3.
CVE-2024-37926	WordPress Wp Accessibility Helper	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.9.
CVE-2024-37921	WordPress Chained Quiz	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Kiboko Labs Chained Quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chained Quiz: from n/a through 1.3.2.8.
CVE-2024-37506	WordPress Charitable Donations & Fundraising	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Charitable Donations & Fundraising Team Charitable allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Charitable: from n/a through 1.8.1.7.
CVE-2024-37475	WordPress Newspack Newsletters	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newspack Newsletters: from n/a through 2.13.2.
CVE-2024-37468	WordPress Newsmatic	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newsmatic: from n/a through 1.3.1.
CVE-2024-37463	Crmperks CRM Perks Forms	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.
CVE-2024-37456	Noptin Noptin Newsletter	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Noptin Newsletter Noptin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Noptin: from n/a through 3.4.2.
CVE-2024-37444	WordPress Defender Security	Med	0.34	5.3	0.01	Nov 1, 2024	Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through <= 4.7.1.
CVE-2024-37427	WordPress Timetics	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.21.
CVE-2024-37411	WordPress Progress Planner	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through <= 0.9.1.
CVE-2024-37276	WordPress Featured Image From URL	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.1.
CVE-2024-37269	WordPress Masterstudy Elementor Widgets	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masterstudy Elementor Widgets: from n/a through 1.2.2.
CVE-2024-37255	Wpmet Elementskit Elementor Addons	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite: from n/a through <= 3.1.4.
CVE-2024-37226	WordPress Kanban Boards for WordPress	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21.
CVE-2024-37220	WordPress Optinly	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in OptinlyHQ Optinly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optinly: from n/a through 1.0.18.
CVE-2024-37123	Vowelweb Ibtana	Med	0.34	5.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in VowelWeb Ibtana allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibtana: from n/a through 1.2.3.3.
CVE-2024-37119	Uncannyowl Uncanny Automator	Med	0.34	5.3	0.01	Nov 1, 2024	Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator Pro: from n/a through 5.3.0.0.
CVE-2024-9430	WordPress Get A Quote For Woocommerce	Med	0.34	5.3	0.00	Oct 31, 2024	The Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress is vulnerable to unauthorized access of Quote data due to a missing capability check on the ct_tepfw_wp_loaded function in all versions up to, and including, 1.0.0. This makes it possible for…
CVE-2024-10544	WordPress Woo Manage Fraud Orders	Med	0.34	5.3	0.01	Oct 31, 2024	The Woo Manage Fraud Orders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information about…
CVE-2024-50512	WordPress Posti Shipping	Med	0.34	5.3	0.00	Oct 30, 2024	Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through <= 3.10.2.
CVE-2024-50454	WordPress Seopress	Med	0.34	5.3	0.00	Oct 29, 2024	Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through <= 8.1.1.
CVE-2024-50422	WordPress Breeze	Med	0.34	5.3	0.01	Oct 29, 2024	Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.1.14.
CVE-2024-50421	WordPress Woocommerce PDF Invoices Packing Slips	Med	0.34	5.3	0.00	Oct 29, 2024	Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a…
CVE-2024-50459	Hossni Mubarak Aidwp	Med	0.34	5.3	0.00	Oct 29, 2024	Missing Authorization vulnerability in Hossni Mubarak AidWP wp-stripe-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AidWP: from n/a through <= 3.2.3.
CVE-2024-9686	WordPress Notification For Telegram	Med	0.34	5.3	0.00	Oct 25, 2024	The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nktgnfw_send_test_message' function in versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers…
CVE-2024-9943	Multivendorx Multivendorx	Med	0.34	6.3	0.00	Oct 24, 2024	The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.4. This is due to missing or incorrect nonce validation on several functions in…
CVE-2024-43924	Dfactory Responsive Lightbox	Med	0.34	5.3	0.01	Oct 23, 2024	Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7.
CVE-2024-10003	WordPress Rover Idx	Med	0.34	6.3	0.00	Oct 22, 2024	The Rover IDX plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 3.0.0.2903. This makes it possible for authenticated attackers, with…
CVE-2024-49306	WordPress WP Content Copy Protection & No Right Click	Med	0.34	5.3	0.00	Oct 20, 2024	Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through <= 3.5.9.
CVE-2024-10040	WordPress Infinite Scroll	Med	0.34	5.3	0.00	Oct 18, 2024	The Infinite-Scroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.2. This is due to missing or incorrect nonce validation on the process_ajax_edit and process_ajax_delete function. This makes it possible for…
CVE-2024-49284	WordPress Wp Sendfox	Med	0.34	5.3	0.00	Oct 17, 2024	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BogdanFix WP SendFox wp-sendfox allows Retrieve Embedded Sensitive Data.This issue affects WP SendFox: from n/a through <= 1.3.1.
CVE-2024-49593	WordPress Advanced Custom Fields	Med	0.34	5.3	0.01	Oct 17, 2024	In Advanced Custom Fields (ACF) before 6.3.9 and Secure Custom Fields before 6.3.6.3 (plugins for WordPress), using the Field Group editor to edit one of the plugin's fields can result in execution of a stored XSS payload. NOTE: if you wish to use the WP Engine alternative…
CVE-2024-9940	WordPress Calculated Fields Form	Med	0.34	5.3	0.00	Oct 17, 2024	The Calculated Fields Form plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 5.2.45. This is due to the plugin not properly neutralizing HTML elements from submitted forms. This makes it possible for unauthenticated attackers to inject…
CVE-2024-49252	WordPress Leyka	Med	0.34	5.3	0.00	Oct 16, 2024	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in VaultDweller Leyka leyka.This issue affects Leyka: from n/a through <= 3.31.6.
CVE-2020-36841	WordPress Woocommerce Smart Coupons	Med	0.34	5.3	0.00	Oct 16, 2024	The WooCommerce Smart Coupons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the woocommerce_coupon_admin_init function in versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to send…
CVE-2024-8760	WordPress Stackable – Page Builder Gutenberg Blocks	Med	0.34	5.3	0.00	Oct 12, 2024	The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to CSS Injection in all versions up to, and including, 3.13.6. This makes it possible for unauthenticated attackers to embed untrusted style information into comments resulting in a possibility of…
CVE-2024-47344	WordPress Ulisting	Med	0.34	5.3	0.00	Oct 7, 2024	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Stylemix uListing ulisting.This issue affects uListing: from n/a through <= 2.1.5.

CVE-2024-43159MedNov 1, 2024
Themegrill
Masteriyo
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.
CVE-2024-43120MedNov 1, 2024
XSERVER Inc.
TypeSquare Webfonts
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7.
CVE-2024-39654MedNov 1, 2024
WordPress
Sign Up Sheets
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through <= 2.2.12.
CVE-2024-39625MedNov 1, 2024
WordPress
Icegram
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24.
CVE-2024-38794MedNov 1, 2024
WordPress
Custom Query Blocks
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Custom Query Blocks: from n/a through 5.2.0.
CVE-2024-38792MedNov 1, 2024
WordPress
ConveyThis
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Language Translate Widget for WordPress – ConveyThis: from n/a through 234.
CVE-2024-38783MedNov 1, 2024
Tychesoftwares
Arconix Faq
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix FAQ: from n/a through 1.9.4.
CVE-2024-38769MedNov 1, 2024
Tychesoftwares
Arconix Shortcodes
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix Shortcodes: from n/a through 2.1.11.
CVE-2024-38748MedNov 1, 2024
Theinnovs
Eleforms
risk 0.34cvss 5.3epss 0.01
Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9.
CVE-2024-38745MedNov 1, 2024
WordPress
Wholesale Suite
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Rymera Web Co Wholesale Suite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wholesale Suite: from n/a through 2.1.12.
CVE-2024-38743MedNov 1, 2024
WordPress
Plum: Spin Wheel & Email Pop-up
risk 0.34cvss 5.3epss 0.00
Access Control vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows . This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0.
CVE-2024-38702MedNov 1, 2024
WordPress
Product Delivery Date For Woocommerce Lite
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in Tyche Softwares Product Delivery Date for WooCommerce – Lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.2.
CVE-2024-38690MedNov 1, 2024
WordPress
iPanorama 360 – WordPress Virtual Tour Builder
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.3.
CVE-2024-37926MedNov 1, 2024
WordPress
Wp Accessibility Helper
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.9.
CVE-2024-37921MedNov 1, 2024
WordPress
Chained Quiz
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Kiboko Labs Chained Quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chained Quiz: from n/a through 1.3.2.8.
CVE-2024-37506MedNov 1, 2024
WordPress
Charitable Donations & Fundraising
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Charitable Donations & Fundraising Team Charitable allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Charitable: from n/a through 1.8.1.7.
CVE-2024-37475MedNov 1, 2024
WordPress
Newspack Newsletters
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newspack Newsletters: from n/a through 2.13.2.
CVE-2024-37468MedNov 1, 2024
WordPress
Newsmatic
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newsmatic: from n/a through 1.3.1.
CVE-2024-37463MedNov 1, 2024
Crmperks
CRM Perks Forms
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.
CVE-2024-37456MedNov 1, 2024
Noptin
Noptin Newsletter
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Noptin Newsletter Noptin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Noptin: from n/a through 3.4.2.
CVE-2024-37444MedNov 1, 2024
WordPress
Defender Security
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through <= 4.7.1.
CVE-2024-37427MedNov 1, 2024
WordPress
Timetics
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.21.
CVE-2024-37411MedNov 1, 2024
WordPress
Progress Planner
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through <= 0.9.1.
CVE-2024-37276MedNov 1, 2024
WordPress
Featured Image From URL
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.1.
CVE-2024-37269MedNov 1, 2024
WordPress
Masterstudy Elementor Widgets
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masterstudy Elementor Widgets: from n/a through 1.2.2.
CVE-2024-37255MedNov 1, 2024
Wpmet
Elementskit Elementor Addons
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite: from n/a through <= 3.1.4.
CVE-2024-37226MedNov 1, 2024
WordPress
Kanban Boards for WordPress
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21.
CVE-2024-37220MedNov 1, 2024
WordPress
Optinly
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in OptinlyHQ Optinly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optinly: from n/a through 1.0.18.
CVE-2024-37123MedNov 1, 2024
Vowelweb
Ibtana
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in VowelWeb Ibtana allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibtana: from n/a through 1.2.3.3.
CVE-2024-37119MedNov 1, 2024
Uncannyowl
Uncanny Automator
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator Pro: from n/a through 5.3.0.0.
CVE-2024-9430MedOct 31, 2024
WordPress
Get A Quote For Woocommerce
risk 0.34cvss 5.3epss 0.00
The Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress is vulnerable to unauthorized access of Quote data due to a missing capability check on the ct_tepfw_wp_loaded function in all versions up to, and including, 1.0.0. This makes it possible for…
CVE-2024-10544MedOct 31, 2024
WordPress
Woo Manage Fraud Orders
risk 0.34cvss 5.3epss 0.01
The Woo Manage Fraud Orders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information about…
CVE-2024-50512MedOct 30, 2024
WordPress
Posti Shipping
risk 0.34cvss 5.3epss 0.00
Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through <= 3.10.2.
CVE-2024-50454MedOct 29, 2024
WordPress
Seopress
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through <= 8.1.1.
CVE-2024-50422MedOct 29, 2024
WordPress
Breeze
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.1.14.
CVE-2024-50421MedOct 29, 2024
WordPress
Woocommerce PDF Invoices Packing Slips
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a…
CVE-2024-50459MedOct 29, 2024
Hossni Mubarak
Aidwp
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Hossni Mubarak AidWP wp-stripe-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AidWP: from n/a through <= 3.2.3.
CVE-2024-9686MedOct 25, 2024
WordPress
Notification For Telegram
risk 0.34cvss 5.3epss 0.00
The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nktgnfw_send_test_message' function in versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers…
CVE-2024-9943MedOct 24, 2024
Multivendorx
Multivendorx
risk 0.34cvss 6.3epss 0.00
The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.4. This is due to missing or incorrect nonce validation on several functions in…
CVE-2024-43924MedOct 23, 2024
Dfactory
Responsive Lightbox
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7.
CVE-2024-10003MedOct 22, 2024
WordPress
Rover Idx
risk 0.34cvss 6.3epss 0.00
The Rover IDX plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 3.0.0.2903. This makes it possible for authenticated attackers, with…
CVE-2024-49306MedOct 20, 2024
WordPress
WP Content Copy Protection & No Right Click
risk 0.34cvss 5.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through <= 3.5.9.
CVE-2024-10040MedOct 18, 2024
WordPress
Infinite Scroll
risk 0.34cvss 5.3epss 0.00
The Infinite-Scroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.2. This is due to missing or incorrect nonce validation on the process_ajax_edit and process_ajax_delete function. This makes it possible for…
CVE-2024-49284MedOct 17, 2024
WordPress
Wp Sendfox
risk 0.34cvss 5.3epss 0.00
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BogdanFix WP SendFox wp-sendfox allows Retrieve Embedded Sensitive Data.This issue affects WP SendFox: from n/a through <= 1.3.1.
CVE-2024-49593MedOct 17, 2024
WordPress
Advanced Custom Fields
risk 0.34cvss 5.3epss 0.01
In Advanced Custom Fields (ACF) before 6.3.9 and Secure Custom Fields before 6.3.6.3 (plugins for WordPress), using the Field Group editor to edit one of the plugin's fields can result in execution of a stored XSS payload. NOTE: if you wish to use the WP Engine alternative…
CVE-2024-9940MedOct 17, 2024
WordPress
Calculated Fields Form
risk 0.34cvss 5.3epss 0.00
The Calculated Fields Form plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 5.2.45. This is due to the plugin not properly neutralizing HTML elements from submitted forms. This makes it possible for unauthenticated attackers to inject…
CVE-2024-49252MedOct 16, 2024
WordPress
Leyka
risk 0.34cvss 5.3epss 0.00
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in VaultDweller Leyka leyka.This issue affects Leyka: from n/a through <= 3.31.6.
CVE-2020-36841MedOct 16, 2024
WordPress
Woocommerce Smart Coupons
risk 0.34cvss 5.3epss 0.00
The WooCommerce Smart Coupons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the woocommerce_coupon_admin_init function in versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to send…
CVE-2024-8760MedOct 12, 2024
WordPress
Stackable – Page Builder Gutenberg Blocks
risk 0.34cvss 5.3epss 0.00
The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to CSS Injection in all versions up to, and including, 3.13.6. This makes it possible for unauthenticated attackers to embed untrusted style information into comments resulting in a possibility of…
CVE-2024-47344MedOct 7, 2024
WordPress
Ulisting
risk 0.34cvss 5.3epss 0.00
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Stylemix uListing ulisting.This issue affects uListing: from n/a through <= 2.1.5.

Page 595 of 803