CyberAlerts

CVE-2024-54416

WordPress Wp Login with Ajax plugin <= 0.6 - CSRF to Stored Cross-Site Scripting vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Navdeep Kumar Wp Login with Ajax allows Stored XSS.This issue affects Wp Login with Ajax: from n/a through 0.6.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54415

WordPress WP-HideThat plugin <= 1.2 - CSRF to Stored Cross-Site Scripting vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Cyle Conoly WP-HideThat allows Stored XSS.This issue affects WP-HideThat: from n/a through 1.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54414

WordPress Geoportail Shortcode plugin <= 2.4.4 - CSRF to Stored Cross-Site Scripting vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in geoWP Geoportail Shortcode allows Stored XSS.This issue affects Geoportail Shortcode: from n/a through 2.4.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54413

WordPress Display Future Posts plugin <= 0.2.3 - CSRF to Stored Cross-Site Scripting vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Stefan Brandt Display Future Posts allows Stored XSS.This issue affects Display Future Posts: from n/a through 0.2.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54412

WordPress ECT Product Carousel plugin <= 1.9 - CSRF to Stored Cross-Site Scripting vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Ecommerce Templates ECT Product Carousel allows Stored XSS.This issue affects ECT Product Carousel: from n/a through 1.9.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54411

WordPress WP Controller plugin <= 3.2.0 - CSRF to Stored Cross-Site Scripting vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in hosting.io, campaigns.io WP Controller allows Stored XSS.This issue affects WP Controller: from n/a through 3.2.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54410

WordPress SOPA Blackout plugin <= 1.4 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Toby Cox SOPA Blackout allows Stored XSS.This issue affects SOPA Blackout: from n/a through 1.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54409

WordPress XPD Reduce Image Filesize plugin <= 1.0 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in fzmaster @ XPD XPD Reduce Image Filesize allows Stored XSS.This issue affects XPD Reduce Image Filesize: from n/a through 1.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54408

WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Jake H. Youtube Video Grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through 1.9.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

CVE-2024-54407

WordPress CK and SyntaxHighlighter plugin <= 3.4.2 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in 随意的风 CK and SyntaxHighlighter allows Stored XSS.This issue affects CK and SyntaxHighlighter: from n/a through 3.4.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 17th, 2024 (4 months ago)

Threat and Vulnerability Intelligence Database

Example Searches: