| Page(s) : 1 ... 21 22 23 24 25 26 27 28 29 30 [31] 32 33 34 35 36 37 38 39 40 41 ... | Result(s) : 101545 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| 6.1 | 2024-05-14 | CVE-2024-4104 | cve | The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dbp_id' parameter in all versions up to, and in... |
| 6.1 | 2024-05-14 | CVE-2024-4150 | cve | The Simple Basic Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘scf_email’ parameter in versions up to, and including, 20221201 due t... |
| 6.4 | 2024-05-14 | CVE-2024-4158 | cve | The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in versions up to, and including, 2.0.42 due to insufficient input sanit... |
| 6.4 | 2024-05-14 | CVE-2024-4193 | cve | The Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'testimonialcategory' shortcode in all versions up to, and including, ... |
| 6.4 | 2024-05-14 | CVE-2024-4209 | cve | The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown timer in all versions up t... |
| 5.3 | 2024-05-14 | CVE-2024-4213 | cve | The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.4 via the order report functio... |
| 6.4 | 2024-05-14 | CVE-2024-4275 | cve | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu... |
| 5.3 | 2024-05-14 | CVE-2024-4280 | cve | The White Label CMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_plugin function in all versions up to,... |
| 4.3 | 2024-05-14 | CVE-2024-4312 | cve | The Soccer Engine – Soccer Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12. This is due to missi... |
| 4.3 | 2024-05-14 | CVE-2024-4314 | cve | The Hostel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5.3. This is due to missing or incorrect nonce validation w... |
| 6.4 | 2024-05-14 | CVE-2024-4316 | cve | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to S... |
| 6.4 | 2024-05-14 | CVE-2024-4329 | cve | The Thim Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.1.9 due to insufficient i... |
| 6.4 | 2024-05-14 | CVE-2024-4339 | cve | The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the General... |
| 6.4 | 2024-05-14 | CVE-2024-4383 | cve | The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm_paypal_subscription_cancel_link' shortcode in all v... |
| 6.4 | 2024-05-14 | CVE-2024-4386 | cve | The Gallery Block (Meow Gallery) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data_atts’ parameter in versions up to, and including, 5.1.3 due to ... |
| 6.4 | 2024-05-14 | CVE-2024-4398 | cve | The HTML5 Audio Player- Best WordPress Audio Player Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to,... |
| 6.4 | 2024-05-14 | CVE-2024-4411 | cve | The Mihdan: Yandex Turbo Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.6.5.1 ... |
| 4.4 | 2024-05-14 | CVE-2024-4417 | cve | The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.49 due to i... |
| 6.4 | 2024-05-14 | CVE-2024-4430 | cve | The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the photo widget crop attribute in all versions up to, and incl... |
| 5.3 | 2024-05-14 | CVE-2024-4444 | cve | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 4.2.6.5. This is due to missing checks ... |
| Page(s) : 1 ... 21 22 23 24 25 26 27 28 29 30 [31] 32 33 34 35 36 37 38 39 40 41 ... | Result(s) : 101545 |
