Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited

CVE-2024-54219
WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thehp AIO Contact.This issue affects AIO Contact: from n/a through 2.8.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (4 months ago)

CVE-2024-54216
WordPress ARForms plugin <= 6.4.1 - Arbitrary File Read vulnerability
Description: Path Traversal: '.../...//' vulnerability in Envato Security Team ARForms allows Path Traversal.This issue affects ARForms: from n/a through 6.4.1.

CVSS: HIGH (7.7)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (4 months ago)

CVE-2024-53790
WordPress Lenxel Core plugin <= 1.2.5 - Local File Inclusion vulnerability
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ogun Labs Lenxel Core for Lenxel(LNX) LMS.This issue affects Lenxel Core for Lenxel(LNX) LMS: from n/a through 1.2.5.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (4 months ago)

CVE-2023-51355
WordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability
Description: Missing Authorization vulnerability in MultiVendorX WC Marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Marketplace: from n/a through 4.0.23.

CVSS: HIGH (8.2)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (4 months ago)

CVE-2023-49856
WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability
Description: Missing Authorization vulnerability in RedNao Smart Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Forms: from n/a through 2.6.84.

CVSS: HIGH (8.1)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (4 months ago)

CVE-2023-49831
WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability
Description: Missing Authorization vulnerability in Metagauss User Registration Forms RegistrationMagic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RegistrationMagic: from n/a through 5.2.3.0.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (4 months ago)

CVE-2023-49817
WordPress Flexible Woocommerce Checkout Field Editor plugin <= 2.0.1 - Broken Access Control vulnerability
Description: Missing Authorization vulnerability in heoLixfy Flexible Woocommerce Checkout Field Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Woocommerce Checkout Field Editor: from n/a through 2.0.1.

CVSS: HIGH (8.2)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (4 months ago)

CVE-2023-49158
WordPress LadiApp plugin <= 4.4 - Broken Access Control lead to XSS vulnerability
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LadiPage LadiApp allows Stored XSS.This issue affects LadiApp: from n/a through 4.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (4 months ago)

CVE-2023-48286
WordPress Accept Stripe Payments plugin <= 2.0.79 - Broken Access Control vulnerability
Description: Missing Authorization vulnerability in Tips and Tricks HQ, wptipsntricks Stripe Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stripe Payments: from n/a through 2.0.79.

CVSS: HIGH (8.2)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (4 months ago)

CVE-2023-47698
WordPress Japanized For WooCommerce plugin <= 2.6.4 - Multiple Broken Access Control vulnerability
Description: Missing Authorization vulnerability in Artisan Workshop Japanized For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Japanized For WooCommerce: from n/a through 2.6.4.

CVSS: HIGH (8.6)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (4 months ago)