CyberAlerts

CVE-2024-54303

WordPress Simple Payment plugin <= 2.3.7 - Refleceted Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky / yalla ya! Simple Payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.3.7.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 14th, 2024 (4 months ago)

CVE-2024-54302

WordPress VForm plugin <= 3.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VForm allows Reflected XSS.This issue affects VForm: from n/a through 3.0.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 14th, 2024 (4 months ago)

CVE-2024-54301

WordPress FormFacade plugin <= 1.3.6 - Reflected Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FormFacade FormFacade allows Reflected XSS.This issue affects FormFacade: from n/a through 1.3.6.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 14th, 2024 (4 months ago)

CVE-2024-54300

WordPress AutoWP plugin <= 2.0.8 - Cross Site Request Forgery (CSRF) vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Neuralabz LTD. AutoWP allows Cross Site Request Forgery.This issue affects AutoWP: from n/a through 2.0.8.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 14th, 2024 (4 months ago)

CVE-2024-54299

WordPress Revi.io plugin <= 5.7.3 - Reflected Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Revi Revi.io allows Reflected XSS.This issue affects Revi.io: from n/a through 5.7.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

December 14th, 2024 (4 months ago)

CVE-2024-54298

WordPress Car Dealer plugin <= 4.46 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Bill Minozzi Car Dealer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Dealer: from n/a through 4.46.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 14th, 2024 (4 months ago)

CVE-2024-54297

WordPress vBSSO-lite plugin <= 1.4.3 - Account Takeover vulnerability

Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in www.vbsso.com vBSSO-lite allows Authentication Bypass.This issue affects vBSSO-lite: from n/a through 1.4.3.

CVSS: CRITICAL (9.8)

EPSS Score: 0.04%

Source: CVE

December 14th, 2024 (4 months ago)

CVE-2024-54296

WordPress CoSchool LMS plugin <= 1.2 - Account Takeover vulnerability

Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Codexpert, Inc CoSchool LMS allows Authentication Bypass.This issue affects CoSchool LMS: from n/a through 1.2.

CVSS: CRITICAL (9.8)

EPSS Score: 0.04%

Source: CVE

December 14th, 2024 (4 months ago)

CVE-2024-54295

WordPress ListApp Mobile Manager plugin <= 1.7.7 - Account Takeover vulnerability

Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in InspireUI ListApp Mobile Manager allows Authentication Bypass.This issue affects ListApp Mobile Manager: from n/a through 1.7.7.

CVSS: CRITICAL (9.8)

EPSS Score: 0.04%

Source: CVE

December 14th, 2024 (4 months ago)

CVE-2024-54294

WordPress Firebase OTP Authentication plugin <= 1.0.1 - Account Takeover vulnerability

Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in appgenixinfotech Firebase OTP Authentication allows Authentication Bypass.This issue affects Firebase OTP Authentication: from n/a through 1.0.1.

CVSS: CRITICAL (9.8)

EPSS Score: 0.04%

Source: CVE

December 14th, 2024 (4 months ago)

Threat and Vulnerability Intelligence Database

Example Searches: