CyberAlerts

CVE-2024-54392

WordPress WP微信机器人 plugin <= 5.3.5 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Midoks WP微信机器人 allows Stored XSS.This issue affects WP微信机器人: from n/a through 5.3.5.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54391

WordPress WordPress Filter plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Matt Walters WordPress Filter allows Stored XSS.This issue affects WordPress Filter: from n/a through 1.4.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54390

WordPress TagGator plugin <= 1.54 - Reflected Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bouzid Nazim Zitouni TagGator allows Reflected XSS.This issue affects TagGator: from n/a through 1.54.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54389

WordPress addWeather plugin <= 2.5.1 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Eduardo Chiaro addWeather allows Cross Site Request Forgery.This issue affects addWeather: from n/a through 2.5.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54388

WordPress Multiple Admin Emails plugin <= 1.0 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Phuc Pham Multiple Admin Emails allows Cross Site Request Forgery.This issue affects Multiple Admin Emails: from n/a through 1.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54387

WordPress Posts Date Ranges plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jaytesh Barange Posts Date Ranges allows Reflected XSS.This issue affects Posts Date Ranges: from n/a through 2.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54386

WordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Get Push Monkey LLC Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart allows Cross Site Request Forgery.This issue affects Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart: from n/a through 3.9.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54385

WordPress Radio Player plugin <= 2.0.82 - Server Side Request Forgery (SSRF) vulnerability

Description: Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through 2.0.82.

CVSS: HIGH (7.2)

EPSS Score: 0.05%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54380

WordPress WP Cookies Enabler plugin <= 1.0.1 - Local File Inclusion vulnerability

Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Filippo Bodei WP Cookies Enabler allows PHP Local File Inclusion.This issue affects WP Cookies Enabler: from n/a through 1.0.1.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54379

WordPress Minterpress plugin <= 1.0.5 - Arbitrary Option Update to Privilege Escalation vulnerability

Description: Missing Authorization vulnerability in Blokhaus Minterpress allows Privilege Escalation.This issue affects Minterpress: from n/a through 1.0.5.

CVSS: HIGH (8.8)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

Threat and Vulnerability Intelligence Database

Example Searches: