Vendor CVEs

WordPress

All CVEs

39,892 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2024-35725	La Studio Element Kit For Elementor	Med	0.28	4.3	Jun 10, 2024	Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6.
CVE-2024-35724	Bosa Themes Bosa Elementor Addons and Templates for WooCommerce	Med	0.28	4.3	Jun 10, 2024	Missing Authorization vulnerability in Bosa Themes Bosa Elementor Addons and Templates for WooCommerce.This issue affects Bosa Elementor Addons and Templates for WooCommerce: from n/a through 1.0.12.
CVE-2024-35723	Arwebdesign Dashboard To Do List	Med	0.28	4.3	Jun 10, 2024	Missing Authorization vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.2.0.
CVE-2024-35722	Awplife Slider Responsive Slideshow	Med	0.28	4.3	Jun 10, 2024	Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0.
CVE-2024-35721	Awplife Image Gallery	Med	0.28	4.3	Jun 10, 2024	Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5.
CVE-2024-35720	Awplife Album Gallery	Med	0.28	4.3	Jun 10, 2024	Missing Authorization vulnerability in A WP Life Album Gallery – WordPress Gallery.This issue affects Album Gallery – WordPress Gallery: from n/a through 1.5.7.
CVE-2024-35717	Awplife Media Slider	Med	0.28	4.3	Jun 10, 2024	Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow: from n/a through 1.3.9.
CVE-2024-22296	Code4recovery 12 Step Meeting List	Med	0.28	4.3	Jun 10, 2024	Missing Authorization vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.28.
CVE-2024-32081	Websupporter Filter Custom Fields & Taxonomies Light	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through 1.05.
CVE-2024-32701	Instawp Instawp Connect	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.
CVE-2024-31423	Volkov Wp Accessibility Helper	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH).This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.5.
CVE-2024-31359	Premmerce Premmerce Product Filter For Woocommerce	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Premmerce Premmerce Product Filter for WooCommerce premmerce-woocommerce-product-filter.This issue affects Premmerce Product Filter for WooCommerce: from n/a through <= 3.7.2.
CVE-2024-31350	Strategy11 Awp Classifieds	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in AWP Classifieds Team AWP Classifieds.This issue affects AWP Classifieds: from n/a through 4.3.1.
CVE-2024-31347	WordPress Tracking Code Manager	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.1.0.
CVE-2024-32714	Academy LMS Academy LMS	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16.
CVE-2024-32821	WordPress Totalpoll Lite	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in TotalSuite Total Poll Lite.This issue affects Total Poll Lite: from n/a through 4.9.9.
CVE-2024-32818	WordPress Meta Data And Taxonomies Filter	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.
CVE-2024-32804	WordPress Wp Gotowebinar	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Martin Gibson WP GoToWebinar.This issue affects WP GoToWebinar: from n/a through 14.46.
CVE-2024-32792	WordPress Hummingbird	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.7.3.
CVE-2024-32787	WordPress Secure Copy Content Protection And Content Locking	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 3.7.1.
CVE-2024-32784	WordPress Cookiehub	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in CookieHub.This issue affects CookieHub: from n/a through 1.1.0.
CVE-2024-32783	WordPress Advanced Testimonial Carousel For Elementor	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in wpcreativeidea Advanced Testimonial Carousel for Elementor.This issue affects Advanced Testimonial Carousel for Elementor: from n/a through 3.0.0.
CVE-2024-35669	Bowo Debug Log Manager	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1.
CVE-2024-34435	Coderevolution Aiomatic	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in CodeRevolution Aiomatic.This issue affects Aiomatic: from n/a through 1.9.3.
CVE-2024-33572	Posimyth Nexter Blocks	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5.
CVE-2024-31267	Wpdesk Flexible Checkout Fields	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.
CVE-2024-31261	Aakash Chakravarthy Announcer	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Aakash Chakravarthy Announcer – Notification & message bars.This issue affects Announcer – Notification & message bars: from n/a through 6.0.
CVE-2024-31252	Dfactory Responsive Lightbox	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6.
CVE-2024-31248	Plugins360 All In One Video Gallery	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Team Plugins360 All-in-One Video Gallery.This issue affects All-in-One Video Gallery: from n/a through 3.5.2.
CVE-2024-30517	Slicedinvoices Sliced Invoices	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2.
CVE-2024-30515	Pixelite Events Manager	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4.
CVE-2024-31294	Androidbubbles Wp Sort Order	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in Fahad Mahmood WP Sort Order.This issue affects WP Sort Order: from n/a through 1.3.1.
CVE-2024-30537	Wpclever Wpc Badge Management For Woocommerce	Med	0.28	4.3	Jun 9, 2024	Missing Authorization vulnerability in WPClever WPC Badge Management for WooCommerce.This issue affects WPC Badge Management for WooCommerce: from n/a through 2.4.0.
CVE-2024-21748	Icegram Icegram	Med	0.28	4.3	Jun 8, 2024	Missing Authorization vulnerability in Icegram.This issue affects Icegram: from n/a through 3.1.21.
CVE-2024-35684	WordPress Elasticpress	Med	0.28	4.3	Jun 8, 2024	Cross-Site Request Forgery (CSRF) vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through <= 5.1.1.
CVE-2024-35682	Themeisle Otter Blocks	Med	0.28	4.3	Jun 8, 2024	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Themeisle Otter Blocks PRO.This issue affects Otter Blocks PRO: from n/a through 2.6.11.
CVE-2024-3987	WordPress WP Mobile Menu	Med	0.28	5.4	Jun 7, 2024	The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping. This makes it possible for…
CVE-2024-1689	WordPress WooCommerce Tools	Med	0.28	4.3	Jun 7, 2024	The WooCommerce Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the woocommerce_tool_toggle_module() function in all versions up to, and including, 1.2.9. This makes it possible for authenticated attackers, with…
CVE-2024-5665	WordPress Login/Signup Popup ( Inline Form + Woocommerce )	Med	0.28	4.3	Jun 6, 2024	The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ‘export_settings’ function in versions 2.7.1 to 2.7.2. This makes it possible for authenticated attackers, with…
CVE-2024-4788	WordPress Boostify Header Footer Builder For Elementor	Med	0.28	4.3	Jun 6, 2024	The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_bhf_post function in all versions up to, and including, 1.3.5. This makes it possible for authenticated…
CVE-2024-35674	Unlimited Elements Unlimited Elements For Elementor	Med	0.28	4.3	Jun 5, 2024	Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.109.
CVE-2024-35673	Pure Chat By Ruby Pure Chat	Med	0.28	4.3	Jun 5, 2024	Cross-Site Request Forgery (CSRF) vulnerability in Pure Chat by Ruby Pure Chat.This issue affects Pure Chat: from n/a through 2.22.
CVE-2024-30484	Risethemes Rt Easy Builder	Med	0.28	4.3	Jun 4, 2024	Missing Authorization vulnerability in RT Easy Builder – Advanced addons for Elementor.This issue affects RT Easy Builder – Advanced addons for Elementor: from n/a through 2.0.
CVE-2023-45053	WordPress Wp Content Pilot	Med	0.28	4.3	Jun 4, 2024	Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in pluginever WP Content Pilot – Autoblogging & Affiliate Marketing Plugin allows Code Injection.This issue affects WP Content Pilot – Autoblogging & Affiliate Marketing Plugin: from…
CVE-2023-28494	Codepeople Contact Form Email	Med	0.28	4.3	Jun 4, 2024	Missing Authorization vulnerability in CodePeople Contact Form Email allows Functionality Misuse.This issue affects Contact Form Email: from n/a through 1.3.31.
CVE-2024-4274	WordPress Essential Real Estate	Med	0.28	4.3	Jun 4, 2024	The Essential Real Estate plugin for WordPress is vulnerable to unauthorized loss of data due to insufficient validation on the remove_property_attachment_ajax() function in all versions up to, and including, 4.4.2. This makes it possible for authenticated attackers, with…
CVE-2024-1717	WordPress Admin Notices Manager	Med	0.28	4.3	Jun 4, 2024	The Admin Notices Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_ajax_call() function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with subscriber-level…
CVE-2023-28492	WordPress Calendar Event Multi View	Med	0.28	4.3	Jun 3, 2024	Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10.
CVE-2023-27460	Codepeople Cp Contact Form With Paypal	Med	0.28	4.3	Jun 3, 2024	Missing Authorization vulnerability in CodePeople, paypaldev CP Contact Form with Paypal allows Functionality Misuse.This issue affects CP Contact Form with Paypal: from n/a through 1.3.34.
CVE-2023-26523	Codepeople Calculated Fields Form	Med	0.28	4.3	Jun 3, 2024	Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated Fields Form: from n/a through 1.1.120.

CVE-2024-35725MedJun 10, 2024
La Studio
Element Kit For Elementor
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6.
CVE-2024-35724MedJun 10, 2024
Bosa Themes
Bosa Elementor Addons and Templates for WooCommerce
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Bosa Themes Bosa Elementor Addons and Templates for WooCommerce.This issue affects Bosa Elementor Addons and Templates for WooCommerce: from n/a through 1.0.12.
CVE-2024-35723MedJun 10, 2024
Arwebdesign
Dashboard To Do List
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.2.0.
CVE-2024-35722MedJun 10, 2024
Awplife
Slider Responsive Slideshow
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0.
CVE-2024-35721MedJun 10, 2024
Awplife
Image Gallery
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5.
CVE-2024-35720MedJun 10, 2024
Awplife
Album Gallery
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in A WP Life Album Gallery – WordPress Gallery.This issue affects Album Gallery – WordPress Gallery: from n/a through 1.5.7.
CVE-2024-35717MedJun 10, 2024
Awplife
Media Slider
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow: from n/a through 1.3.9.
CVE-2024-22296MedJun 10, 2024
Code4recovery
12 Step Meeting List
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.28.
CVE-2024-32081MedJun 9, 2024
Websupporter
Filter Custom Fields & Taxonomies Light
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through 1.05.
CVE-2024-32701MedJun 9, 2024
Instawp
Instawp Connect
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.
CVE-2024-31423MedJun 9, 2024
Volkov
Wp Accessibility Helper
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH).This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.5.
CVE-2024-31359MedJun 9, 2024
Premmerce
Premmerce Product Filter For Woocommerce
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Premmerce Premmerce Product Filter for WooCommerce premmerce-woocommerce-product-filter.This issue affects Premmerce Product Filter for WooCommerce: from n/a through <= 3.7.2.
CVE-2024-31350MedJun 9, 2024
Strategy11
Awp Classifieds
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in AWP Classifieds Team AWP Classifieds.This issue affects AWP Classifieds: from n/a through 4.3.1.
CVE-2024-31347MedJun 9, 2024
WordPress
Tracking Code Manager
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.1.0.
CVE-2024-32714MedJun 9, 2024
Academy LMS
Academy LMS
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16.
CVE-2024-32821MedJun 9, 2024
WordPress
Totalpoll Lite
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in TotalSuite Total Poll Lite.This issue affects Total Poll Lite: from n/a through 4.9.9.
CVE-2024-32818MedJun 9, 2024
WordPress
Meta Data And Taxonomies Filter
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.
CVE-2024-32804MedJun 9, 2024
WordPress
Wp Gotowebinar
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Martin Gibson WP GoToWebinar.This issue affects WP GoToWebinar: from n/a through 14.46.
CVE-2024-32792MedJun 9, 2024
WordPress
Hummingbird
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.7.3.
CVE-2024-32787MedJun 9, 2024
WordPress
Secure Copy Content Protection And Content Locking
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 3.7.1.
CVE-2024-32784MedJun 9, 2024
WordPress
Cookiehub
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in CookieHub.This issue affects CookieHub: from n/a through 1.1.0.
CVE-2024-32783MedJun 9, 2024
WordPress
Advanced Testimonial Carousel For Elementor
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in wpcreativeidea Advanced Testimonial Carousel for Elementor.This issue affects Advanced Testimonial Carousel for Elementor: from n/a through 3.0.0.
CVE-2024-35669MedJun 9, 2024
Bowo
Debug Log Manager
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1.
CVE-2024-34435MedJun 9, 2024
Coderevolution
Aiomatic
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in CodeRevolution Aiomatic.This issue affects Aiomatic: from n/a through 1.9.3.
CVE-2024-33572MedJun 9, 2024
Posimyth
Nexter Blocks
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5.
CVE-2024-31267MedJun 9, 2024
Wpdesk
Flexible Checkout Fields
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.
CVE-2024-31261MedJun 9, 2024
Aakash Chakravarthy
Announcer
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Aakash Chakravarthy Announcer – Notification & message bars.This issue affects Announcer – Notification & message bars: from n/a through 6.0.
CVE-2024-31252MedJun 9, 2024
Dfactory
Responsive Lightbox
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6.
CVE-2024-31248MedJun 9, 2024
Plugins360
All In One Video Gallery
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Team Plugins360 All-in-One Video Gallery.This issue affects All-in-One Video Gallery: from n/a through 3.5.2.
CVE-2024-30517MedJun 9, 2024
Slicedinvoices
Sliced Invoices
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2.
CVE-2024-30515MedJun 9, 2024
Pixelite
Events Manager
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4.
CVE-2024-31294MedJun 9, 2024
Androidbubbles
Wp Sort Order
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Fahad Mahmood WP Sort Order.This issue affects WP Sort Order: from n/a through 1.3.1.
CVE-2024-30537MedJun 9, 2024
Wpclever
Wpc Badge Management For Woocommerce
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WPClever WPC Badge Management for WooCommerce.This issue affects WPC Badge Management for WooCommerce: from n/a through 2.4.0.
CVE-2024-21748MedJun 8, 2024
Icegram
Icegram
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Icegram.This issue affects Icegram: from n/a through 3.1.21.
CVE-2024-35684MedJun 8, 2024
WordPress
Elasticpress
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through <= 5.1.1.
CVE-2024-35682MedJun 8, 2024
Themeisle
Otter Blocks
risk 0.28cvss 4.3epss 0.00
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Themeisle Otter Blocks PRO.This issue affects Otter Blocks PRO: from n/a through 2.6.11.
CVE-2024-3987MedJun 7, 2024
WordPress
WP Mobile Menu
risk 0.28cvss 5.4epss 0.00
The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping. This makes it possible for…
CVE-2024-1689MedJun 7, 2024
WordPress
WooCommerce Tools
risk 0.28cvss 4.3epss 0.00
The WooCommerce Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the woocommerce_tool_toggle_module() function in all versions up to, and including, 1.2.9. This makes it possible for authenticated attackers, with…
CVE-2024-5665MedJun 6, 2024
WordPress
Login/Signup Popup ( Inline Form + Woocommerce )
risk 0.28cvss 4.3epss 0.00
The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ‘export_settings’ function in versions 2.7.1 to 2.7.2. This makes it possible for authenticated attackers, with…
CVE-2024-4788MedJun 6, 2024
WordPress
Boostify Header Footer Builder For Elementor
risk 0.28cvss 4.3epss 0.00
The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_bhf_post function in all versions up to, and including, 1.3.5. This makes it possible for authenticated…
CVE-2024-35674MedJun 5, 2024
Unlimited Elements
Unlimited Elements For Elementor
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.109.
CVE-2024-35673MedJun 5, 2024
Pure Chat By Ruby
Pure Chat
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Pure Chat by Ruby Pure Chat.This issue affects Pure Chat: from n/a through 2.22.
CVE-2024-30484MedJun 4, 2024
Risethemes
Rt Easy Builder
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in RT Easy Builder – Advanced addons for Elementor.This issue affects RT Easy Builder – Advanced addons for Elementor: from n/a through 2.0.
CVE-2023-45053MedJun 4, 2024
WordPress
Wp Content Pilot
risk 0.28cvss 4.3epss 0.00
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in pluginever WP Content Pilot – Autoblogging & Affiliate Marketing Plugin allows Code Injection.This issue affects WP Content Pilot – Autoblogging & Affiliate Marketing Plugin: from…
CVE-2023-28494MedJun 4, 2024
Codepeople
Contact Form Email
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in CodePeople Contact Form Email allows Functionality Misuse.This issue affects Contact Form Email: from n/a through 1.3.31.
CVE-2024-4274MedJun 4, 2024
WordPress
Essential Real Estate
risk 0.28cvss 4.3epss 0.00
The Essential Real Estate plugin for WordPress is vulnerable to unauthorized loss of data due to insufficient validation on the remove_property_attachment_ajax() function in all versions up to, and including, 4.4.2. This makes it possible for authenticated attackers, with…
CVE-2024-1717MedJun 4, 2024
WordPress
Admin Notices Manager
risk 0.28cvss 4.3epss 0.00
The Admin Notices Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_ajax_call() function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with subscriber-level…
CVE-2023-28492MedJun 3, 2024
WordPress
Calendar Event Multi View
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10.
CVE-2023-27460MedJun 3, 2024
Codepeople
Cp Contact Form With Paypal
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in CodePeople, paypaldev CP Contact Form with Paypal allows Functionality Misuse.This issue affects CP Contact Form with Paypal: from n/a through 1.3.34.
CVE-2023-26523MedJun 3, 2024
Codepeople
Calculated Fields Form
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated Fields Form: from n/a through 1.1.120.

Page 693 of 798