CyberAlerts

CVE-2024-54374

WordPress Sogrid plugin <= 1.5.6 - Local File Inclusion vulnerability

Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Sabri Taieb Sogrid allows PHP Local File Inclusion.This issue affects Sogrid: from n/a through 1.5.6.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54373

WordPress EduAdmin Booking plugin <= 5.2.0 - Local File Inclusion vulnerability

Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chris Gårdenberg, MultiNet Interactive AB EduAdmin Booking allows PHP Local File Inclusion.This issue affects EduAdmin Booking: from n/a through 5.2.0.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54365

WordPress KH Easy User Settings plugin <= 1.0.0 - Privilege Escalation vulnerability

Description: Incorrect Privilege Assignment vulnerability in Halim KH Easy User Settings allows Privilege Escalation.This issue affects KH Easy User Settings: from n/a through 1.0.0.

CVSS: HIGH (8.8)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54364

WordPress Feedpress Generator plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spartac Feedpress Generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through 1.2.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54359

WordPress Banner System plugin <= 1.0.0 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Saul Morales Pacheco Banner System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Banner System: from n/a through 1.0.0.

CVSS: HIGH (8.2)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54358

WordPress 3D Avatar User Profile plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Avatar 3D Creator 3D Avatar User Profile allows Reflected XSS.This issue affects 3D Avatar User Profile: from n/a through 1.0.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54353

WordPress Hack-Info plugin <= 3.17 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in WPGear Hack-Info allows Stored XSS.This issue affects Hack-Info: from n/a through 3.17.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54352

WordPress Sogrid plugin <= 1.5.2 - CSRF to Privilege Escalation vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Sabri Taieb Sogrid allows Privilege Escalation.This issue affects Sogrid: from n/a through 1.5.2.

CVSS: HIGH (8.8)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54332

WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in WPFactory WP Currency Exchange Rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through 1.2.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54331

WordPress I Plant A Tree plugin <= 1.7.3 - CSRF to Stored Cross-Site Scripting vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Micha I Plant A Tree allows Stored XSS.This issue affects I Plant A Tree: from n/a through 1.7.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

Threat and Vulnerability Intelligence Database

Example Searches: