NA - CVE-2024-9328 - A vulnerability was found in SourceCodester...
A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/edit_client.php....
Critical - CVE-2024-8353 - The GiveWP – Donation Plugin and Fundraising...
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1 via deserialization of untrusted input...
Medium - CVE-2024-8547 - The Simple Popup Plugin plugin for WordPress is...
The Simple Popup Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [popup] shortcode in all versions up to, and including, 4.5 due to insufficient input...
Medium - CVE-2024-8788 - The EU/UK VAT Manager for WooCommerce plugin...
The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up...
Medium - CVE-2024-9023 - The WP-WebAuthn plugin for WordPress is...
The WP-WebAuthn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wwa_login_form shortcode in all versions up to, and including, 1.3.1 due to insufficient...
Medium - CVE-2024-9189 - The EU/UK VAT Manager for WooCommerce plugin...
The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the alg_wc_eu_vat_exempt_vat_from_admin() function...
Medium - CVE-2024-8715 - The Simple LDAP Login plugin for WordPress is...
The Simple LDAP Login plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and...