Click to open the Alert Filter

 
Year Month
Severity
Categories
Search by Alert Name
Page(s) : 1 [2] 3 4 5 6 7 8 9 10 11 12 ... Result(s) : 100831

Alerts Feed Alerts

DATE NAME CATEGORIES DETAIL
4.3 2024-05-02 CVE-2023-7067 cve The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to unauthorized modifica...
6.1 2024-05-02 CVE-2024-0613 cve The Delete Custom Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3.1. This is due to missing or incorrect nonce ...
5.3 2024-05-02 CVE-2024-0615 cve The Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More plugin for WordPress is vulnerable to Sensitive Information Exp...
5.3 2024-05-02 CVE-2024-0710 cve The GP Unique ID plugin for WordPress is vulnerable to Unique ID Modification in all versions up to, and including, 1.5.5. This is due to insufficient input validation. This mak...
4.3 2024-05-02 CVE-2024-0847 cve The 5280 Bootstrap Modal Contact Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incor...
6.1 2024-05-02 CVE-2024-0848 cve The AA Cash Calculator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘invoice’ parameter in all versions up to, and including, 1.0 due to insuffic...
5.3 2024-05-02 CVE-2024-0908 cve The Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check ...
6.4 2024-05-02 CVE-2024-1348 cve The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in all versions up to, and includ...
6.4 2024-05-02 CVE-2024-1386 cve The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions 1.5.0 to 1.7.6 due to i...
6.4 2024-05-02 CVE-2024-1396 cve The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in all versions up to, and incl...
4.3 2024-05-02 CVE-2024-1415 cve The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.9. This i...
4.3 2024-05-02 CVE-2024-1416 cve The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to unauthorized access to functionality due to a missing capability check on seve...
6.4 2024-05-02 CVE-2024-1533 cve The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML Element in all versions up to, and including, 2....
6.4 2024-05-02 CVE-2024-1572 cve The WP ULike plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_ulike' shortcode in all versions up to, and including, 4.6.9 d...
5.3 2024-05-02 CVE-2024-1584 cve The Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capab...
6.3 2024-05-02 CVE-2024-1677 cve The Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data, modification o...
5.3 2024-05-02 CVE-2024-1678 cve The Subway – Private Site Option plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via the REST API. This makes it...
6.4 2024-05-02 CVE-2024-1679 cve The Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the templat...
5.3 2024-05-02 CVE-2024-1688 cve The Woo Total Sales plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_orders_archive() function in all versions up t...
4.3 2024-05-02 CVE-2024-1716 cve The Admin Bar Remover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_form() function in all versions up ...
Page(s) : 1 [2] 3 4 5 6 7 8 9 10 11 12 ... Result(s) : 100831