CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2024-56228

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Wishlist for WooCommerce: Multi Wishlists Per Customer allows Reflected XSS.This issue affects Wishlist for WooCommerce: Multi Wishlists Per Customer: from n/a through 3.1.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
January 1st, 2025 (7 months ago)

CVE-2024-56227

Description: Missing Authorization vulnerability in WP Royal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through 1.7.1001.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE
January 1st, 2025 (7 months ago)

CVE-2024-56226

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons allows Reflected XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1001.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
January 1st, 2025 (7 months ago)

CVE-2024-56225

Description: Missing Authorization vulnerability in Leap13 Premium Addons for Elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Premium Addons for Elementor: from n/a through 4.10.56.

CVSS: MEDIUM (5.4)

EPSS Score: 0.04%

Source: CVE
January 1st, 2025 (7 months ago)

CVE-2024-56224

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ledenbeheer allows Stored XSS.This issue affects Ledenbeheer: from n/a through 2.1.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 1st, 2025 (7 months ago)

CVE-2024-56223

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood Gulri Slider allows Reflected XSS.This issue affects Gulri Slider: from n/a through 3.5.8.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
January 1st, 2025 (7 months ago)

CVE-2024-56222

Description: Cross-Site Request Forgery (CSRF) vulnerability in Codebard CodeBard Help Desk allows Cross Site Request Forgery.This issue affects CodeBard Help Desk: from n/a through 1.1.1.

CVSS: MEDIUM (5.4)

EPSS Score: 0.04%

Source: CVE
January 1st, 2025 (7 months ago)

CVE-2024-56221

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elicus WPMozo Addons Lite for Elementor allows Stored XSS.This issue affects WPMozo Addons Lite for Elementor: from n/a through 1.2.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 1st, 2025 (7 months ago)

CVE-2024-56220

Description: Incorrect Privilege Assignment vulnerability in SSL Wireless SSL Wireless SMS Notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through 3.5.0.

CVSS: CRITICAL (9.8)

EPSS Score: 0.04%

Source: CVE
January 1st, 2025 (7 months ago)

CVE-2024-56219

Description: Missing Authorization vulnerability in MarketingFire Widget Options allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Widget Options: from n/a through 4.0.6.1.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE
January 1st, 2025 (7 months ago)