Alerts
15 Oct 2024
Medium - CVE-2024-9546 - The WPIDE – File Manager & Code Editor plugin...
The WPIDE – File Manager & Code Editor plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.9. This is due to the plugin utilizing the PHP-Parser...
15 Oct 2024
High - CVE-2024-9548 - The SlimStat Analytics plugin for WordPress is...
The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the resource parameter in all versions up to, and including, 5.2.6 due to insufficient input...
15 Oct 2024
Medium - CVE-2024-6757 - The Elementor Website Builder – More than Just...
The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 3.23.5 via the get_image_alt...
15 Oct 2024
High - CVE-2024-9687 - The WP 2FA with Telegram plugin for WordPress...
The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the...
15 Oct 2024
Medium - CVE-2024-9820 - The WP 2FA with Telegram plugin for WordPress...
The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie,...
15 Oct 2024
NA - CVE-2024-9952 - A vulnerability was found in SourceCodester...
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=system_info/contact_info of...