CyberAlerts

CVE-2024-53737

WordPress WP Mailster plugin <= 1.8.16.0 - Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.8.16.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-53736

WordPress Custom Shortcode Sidebars plugin <= 1.2 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Jason Grim Custom Shortcode Sidebars allows Stored XSS.This issue affects Custom Shortcode Sidebars: from n/a through 1.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-53734

WordPress Idealien Category Enhancements plugin <= 1.2 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Idealien Studios Idealien Category Enhancements allows Stored XSS.This issue affects Idealien Category Enhancements: from n/a through 1.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-53733

WordPress Fence URL plugin <= 2.0.0 - CSRF to Stored XSS vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rohit Harsh Fence URL allows Stored XSS.This issue affects Fence URL: from n/a through 2.0.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-53732

WordPress Footer Flyout Widget plugin <= 1.1 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in WP WOX Footer Flyout Widget allows Stored XSS.This issue affects Footer Flyout Widget: from n/a through 1.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-53731

WordPress Fintelligence Calculator plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fintelligence Fintelligence Calculator allows Stored XSS.This issue affects Fintelligence Calculator: from n/a through 1.0.3.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-52501

WordPress Office Locator plugin <= 1.3.0 - Local File Inclusion vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in webbytemplate Office Locator.This issue affects Office Locator: from n/a through 1.3.0.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-52499

WordPress Pricing table addon for elementor plugin <= 1.0.0 - Local File Inclusion vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Kardi Pricing table addon for elementor allows PHP Local File Inclusion.This issue affects Pricing table addon for elementor: from n/a through 1.0.0.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-52498

WordPress SP Blog Designer plugin <= 1.0.0 - Local File Inclusion vulnerability

Description: Path Traversal: '.../...//' vulnerability in Softpulse Infotech SP Blog Designer allows PHP Local File Inclusion.This issue affects SP Blog Designer: from n/a through 1.0.0.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

CVE-2024-52497

WordPress Shopready plugin <= 3.5 - Local File Inclusion vulnerability

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in quomodosoft Shopready allows PHP Local File Inclusion.This issue affects Shopready: from n/a through 3.5.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

November 29th, 2024 (5 months ago)

Threat and Vulnerability Intelligence Database

Example Searches: