Mon, Feb 12 · 07:15 AM CSTCVE-2024-25100
10.0/10 · Must read/watchNVDvuln
Summary
Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program coupon-referral-program allows Object Injection.This issue affects Coupon Referral Program: from n/a through < 1.8.4.
CVECVE-2024-25100
SeverityCRITICAL
TypeUPDATED
PublishedMon, Feb 12 · 07:15 AM CST
ModifiedThu, Apr 23 · 03:18 PM CDT
Thu, Apr 18 · 09:15 AM CDTCVE-2024-32599
10.0/10 · Must read/watchNVDvuln
Summary
Improper Control of Generation of Code ('Code Injection') vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator.This issue affects WP Dummy Content Generator: from n/a through <= 3.2.1.
CVECVE-2024-32599
SeverityCRITICAL
TypeUPDATED
PublishedThu, Apr 18 · 09:15 AM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Wed, Apr 24 · 08:15 AM CDTCVE-2024-32836
9.1/10 · Must read/watchNVDvuln
Summary
Unrestricted Upload of File with Dangerous Type vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through <= 3.5.11.
CVECVE-2024-32836
SeverityCRITICAL
TypeUPDATED
PublishedWed, Apr 24 · 08:15 AM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Fri, Apr 08 · 03:15 PM CDTCVE-2021-41715
8.8/10 · Worth your timeNVDvuln
Summary
libsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither.c:379.
CVECVE-2021-41715
SeverityHIGH
TypeUPDATED
PublishedFri, Apr 08 · 03:15 PM CDT
ModifiedThu, Apr 23 · 03:16 PM CDT
Thu, Jul 27 · 02:15 PM CDTCVE-2023-38512
8.8/10 · Worth your timeNVDvuln
Summary
Cross-Site Request Forgery (CSRF) vulnerability in wpstream WpStream wpstream allows Cross Site Request Forgery.This issue affects WpStream: from n/a through <= 4.5.4.
CVECVE-2023-38512
SeverityHIGH
TypeUPDATED
PublishedThu, Jul 27 · 02:15 PM CDT
ModifiedThu, Apr 23 · 03:17 PM CDT
Mon, Apr 15 · 10:15 AM CDTCVE-2024-31424
8.8/10 · Worth your timeNVDvuln
Summary
Cross-Site Request Forgery (CSRF) vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93.
CVECVE-2024-31424
SeverityHIGH
TypeUPDATED
PublishedMon, Apr 15 · 10:15 AM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Wed, Jan 31 · 12:16 PM CSTCVE-2024-23507
8.5/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.
CVECVE-2024-23507
SeverityHIGH
TypeUPDATED
PublishedWed, Jan 31 · 12:16 PM CST
ModifiedThu, Apr 23 · 03:18 PM CDT
Tue, Mar 19 · 02:15 PM CDTCVE-2024-29136
8.5/10 · Worth your timeNVDvuln
Summary
Deserialization of Untrusted Data vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.17.
CVECVE-2024-29136
SeverityHIGH
TypeUPDATED
PublishedTue, Mar 19 · 02:15 PM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Thu, Mar 28 · 05:15 AM CDTCVE-2024-30236
8.5/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4.
CVECVE-2024-30236
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 28 · 05:15 AM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Wed, Mar 27 · 02:15 PM CDTCVE-2024-30238
8.5/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.2.
CVECVE-2024-30238
SeverityHIGH
TypeUPDATED
PublishedWed, Mar 27 · 02:15 PM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Thu, Mar 28 · 05:15 AM CDTCVE-2024-30244
8.5/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.
CVECVE-2024-30244
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 28 · 05:15 AM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Fri, Mar 29 · 02:15 PM CDTCVE-2024-30488
8.5/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Katie Zotpress zotpress.This issue affects Zotpress: from n/a through <= 7.3.7.
CVECVE-2024-30488
SeverityHIGH
TypeUPDATED
PublishedFri, Mar 29 · 02:15 PM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Wed, Apr 24 · 09:15 AM CDTCVE-2024-32706
8.5/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.
CVECVE-2024-32706
SeverityHIGH
TypeUPDATED
PublishedWed, Apr 24 · 09:15 AM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Thu, Mar 28 · 05:15 AM CDTCVE-2024-30229
8.0/10 · Worth your timeNVDvuln
Summary
Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <= 3.4.2.
CVECVE-2024-30229
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 28 · 05:15 AM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Thu, Mar 28 · 06:15 AM CDTCVE-2024-23500
7.7/10 · Worth your timeNVDvuln
Summary
Server-Side Request Forgery (SSRF) vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through <= 3.2.19.
CVECVE-2024-23500
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 28 · 06:15 AM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Sat, Jan 27 · 12:15 AM CSTCVE-2024-23506
7.7/10 · Worth your timeNVDvuln
Summary
Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.
CVECVE-2024-23506
SeverityHIGH
TypeUPDATED
PublishedSat, Jan 27 · 12:15 AM CST
ModifiedThu, Apr 23 · 03:18 PM CDT
Thu, Dec 28 · 12:15 PM CSTCVE-2023-50854
7.6/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly Squirrly SEO - Advanced Pack squirrly-seo-pack allows SQL Injection.This issue affects Squirrly SEO - Advanced Pack: from n/a through < 2.4.02.
CVECVE-2023-50854
SeverityHIGH
TypeUPDATED
PublishedThu, Dec 28 · 12:15 PM CST
ModifiedThu, Apr 23 · 03:18 PM CDT
Fri, Dec 29 · 11:15 AM CSTCVE-2023-52135
7.6/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mark Westguard WS Form LITE ws-form allows Blind SQL Injection.This issue affects WS Form LITE: from n/a through <= 1.9.170.
CVECVE-2023-52135
SeverityHIGH
TypeUPDATED
PublishedFri, Dec 29 · 11:15 AM CST
ModifiedThu, Apr 23 · 03:18 PM CDT
Thu, Mar 28 · 05:15 AM CDTCVE-2024-30245
7.6/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pierre Lannoy DecaLog decalog.This issue affects DecaLog: from n/a through <= 3.9.0.
CVECVE-2024-30245
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 28 · 05:15 AM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Mon, Jan 08 · 07:15 PM CSTCVE-2023-52190
7.5/10 · Worth your timeNVDvuln
Summary
Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Coupon Referral Program coupon-referral-program allows Retrieve Embedded Sensitive Data.This issue affects Coupon Referral Program: from n/a through <= 1.8.4.
CVECVE-2023-52190
SeverityHIGH
TypeUPDATED
PublishedMon, Jan 08 · 07:15 PM CST
ModifiedThu, Apr 23 · 03:18 PM CDT
Wed, Apr 24 · 08:15 AM CDTCVE-2024-32825
7.5/10 · Worth your timeNVDvuln
Summary
Insertion of Sensitive Information Into Sent Data vulnerability in Simply Static Simply Static simply-static.This issue affects Simply Static: from n/a through <= 3.1.3.
CVECVE-2024-32825
SeverityHIGH
TypeUPDATED
PublishedWed, Apr 24 · 08:15 AM CDT
ModifiedThu, Apr 23 · 03:18 PM CDT
Tue, Jul 25 · 02:15 PM CDTCVE-2023-36385
7.1/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through <= 2.9.9.
CVECVE-2023-36385
SeverityHIGH
TypeUPDATED
PublishedTue, Jul 25 · 02:15 PM CDT
ModifiedThu, Apr 23 · 03:17 PM CDT
Mon, Sep 04 · 12:15 PM CDTCVE-2023-40205
7.1/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixelgrade PixTypes pixtypes allows DOM-Based XSS.This issue affects PixTypes: from n/a through <= 1.4.15.
CVECVE-2023-40205
SeverityHIGH
TypeUPDATED
PublishedMon, Sep 04 · 12:15 PM CDT
ModifiedThu, Apr 23 · 03:17 PM CDT
Tue, Nov 14 · 11:15 PM CSTCVE-2023-47517
7.1/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brewlabs SendPress Newsletters sendpress allows DOM-Based XSS.This issue affects SendPress Newsletters: from n/a through <= 1.23.11.6.
CVECVE-2023-47517
SeverityHIGH
TypeUPDATED
PublishedTue, Nov 14 · 11:15 PM CST
ModifiedThu, Apr 23 · 03:17 PM CDT
Thu, Feb 29 · 06:15 AM CSTCVE-2023-50905
7.1/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows DOM-Based XSS.This issue affects WP Activity Log: from n/a through <= 4.6.1.
CVECVE-2023-50905
SeverityHIGH
TypeUPDATED
PublishedThu, Feb 29 · 06:15 AM CST
ModifiedThu, Apr 23 · 03:18 PM CDT