Medium - CVE-2024-11690 - The Financial Stocks & Crypto Market Data...
The Financial Stocks & Crypto Market Data Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'e' parameter in all versions up to, and including, 1.10.3...
Medium - CVE-2024-11810 - The PayGreen Payment Gateway plugin for...
The PayGreen Payment Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message_id' parameter in all versions up to, and including, 1.0.26 due to...
Medium - CVE-2024-12049 - The Woo Ukrposhta plugin for WordPress is...
The Woo Ukrposhta plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'order', 'post', and 'idd' parameters in all versions up to, and...
Medium - CVE-2024-12124 - The Role Includer plugin for WordPress is...
The Role Includer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘user_id’ parameter in all versions up to, and including, 1.6 due to insufficient input sanitization...
Medium - CVE-2024-12126 - The SEO Keywords plugin for WordPress is...
The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘google_error’ parameter in all versions up to, and including, 1.1.3 due to insufficient input...
Medium - CVE-2024-12140 - The Elementor Addons AI Addons – 70 Widgets,...
The Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.1 via the...
Medium - CVE-2024-12153 - The GDY Modular Content plugin for WordPress is...
The GDY Modular Content plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and...
High - CVE-2024-12157 - The Popup – MailChimp, GetResponse and...
The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'upc_delete_db_record' AJAX...
Medium - CVE-2024-12158 - The Popup – MailChimp, GetResponse and...
The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the...
Medium - CVE-2024-12159 - The Optimize Your Campaigns – Google Shopping –...
The Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the...