Medium - CVE-2024-12140 - The Elementor Addons AI Addons – 70 Widgets,...
The Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.1 via the...
Medium - CVE-2024-12153 - The GDY Modular Content plugin for WordPress is...
The GDY Modular Content plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and...
High - CVE-2024-12157 - The Popup – MailChimp, GetResponse and...
The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'upc_delete_db_record' AJAX...
Medium - CVE-2024-12158 - The Popup – MailChimp, GetResponse and...
The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the...
Medium - CVE-2024-12159 - The Optimize Your Campaigns – Google Shopping –...
The Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the...
Medium - CVE-2024-12170 - The ViewMedica 9 plugin for WordPress is...
The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.15. This is due to missing or incorrect nonce validation on the...
Medium - CVE-2024-12176 - The WordLift – AI powered SEO – Schema plugin...
The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'wl_config_plugin' AJAX action in all versions up...
Medium - CVE-2024-12207 - The Toggles Shortcode and Widget plugin for...
The Toggles Shortcode and Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 1.14 due to insufficient input...
Medium - CVE-2024-12208 - The Backup and Restore WordPress – Backup...
The Backup and Restore WordPress – Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.50. This is due to missing or incorrect...
Medium - CVE-2024-12214 - The WooCommerce HSS Extension for Streaming...
The WooCommerce HSS Extension for Streaming Video plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘videolink’ parameter in all versions up to, and including, 3.31 due...