NA - CVE-2024-45032 - A vulnerability has been identified in...
A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Affected components do not properly...
Medium - CVE-2024-8241 - The Nova Blocks by Pixelgrade plugin for...
The Nova Blocks by Pixelgrade plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute of the 'wp:separator' Gutenberg block in all versions...
Medium - CVE-2024-8543 - The Slider comparison image before and after...
The Slider comparison image before and after plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [sciba] shortcode in all versions up to, and including, 0.8.3...
NA - CVE-2024-45845 - nix 2.24 through 2.24.5 allows directory...
nix 2.24 through 2.24.5 allows directory traversal via a symlink in a nar file, because of mishandling of a directory containing a symlink and a directory of the same name, aka GHSA-h4vv-h3jq-v493.
High - CVE-2024-7770 - The Bit File Manager – 100% Free & Open Source...
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...
Medium - CVE-2024-6282 - The Master Addons – Free Widgets, Hover...
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-jltma-wrapper-link...
Medium - CVE-2024-8369 - The EventPrime – Events Calendar, Bookings and...
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all...