CyberAlerts

CVE-2024-53736

WordPress Custom Shortcode Sidebars plugin <= 1.2 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Jason Grim Custom Shortcode Sidebars allows Stored XSS.This issue affects Custom Shortcode Sidebars: from n/a through 1.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-53734

WordPress Idealien Category Enhancements plugin <= 1.2 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Idealien Studios Idealien Category Enhancements allows Stored XSS.This issue affects Idealien Category Enhancements: from n/a through 1.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-53733

WordPress Fence URL plugin <= 2.0.0 - CSRF to Stored XSS vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rohit Harsh Fence URL allows Stored XSS.This issue affects Fence URL: from n/a through 2.0.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-53732

WordPress Footer Flyout Widget plugin <= 1.1 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in WP WOX Footer Flyout Widget allows Stored XSS.This issue affects Footer Flyout Widget: from n/a through 1.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-52501

WordPress Office Locator plugin <= 1.3.0 - Local File Inclusion vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in webbytemplate Office Locator.This issue affects Office Locator: from n/a through 1.3.0.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-52499

WordPress Pricing table addon for elementor plugin <= 1.0.0 - Local File Inclusion vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Kardi Pricing table addon for elementor allows PHP Local File Inclusion.This issue affects Pricing table addon for elementor: from n/a through 1.0.0.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-52498

WordPress SP Blog Designer plugin <= 1.0.0 - Local File Inclusion vulnerability

Description: Path Traversal: '.../...//' vulnerability in Softpulse Infotech SP Blog Designer allows PHP Local File Inclusion.This issue affects SP Blog Designer: from n/a through 1.0.0.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-52497

WordPress Shopready plugin <= 3.5 - Local File Inclusion vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in quomodosoft Shopready allows PHP Local File Inclusion.This issue affects Shopready: from n/a through 3.5.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-52496

WordPress Absolute Addons For Elementor plugin <= 1.0.14 - Local File Inclusion vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AbsolutePlugins Absolute Addons For Elementor allows Local Code Inclusion.This issue affects Absolute Addons For Elementor: from n/a through 1.0.14.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-52495

WordPress Distance Based Shipping Calculator plugin <= 2.0.21 - SQL Injection vulnerability

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eniture Technology Distance Based Shipping Calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through 2.0.21.

CVSS: HIGH (8.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

Threat and Vulnerability Intelligence Database

Example Searches: