NA - CVE-2024-58049 - Permission verification vulnerability in the...
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
NA - CVE-2024-58050 - Vulnerability of improper access permission in...
Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
NA - CVE-2025-27521 - Vulnerability of improper access permission in...
Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Medium - CVE-2024-13682 - The Wallet System for WooCommerce – Wallet,...
The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and...
Medium - CVE-2024-13724 - The Wallet System for WooCommerce – Wallet,...
The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for WordPress is vulnerable to unauthorized access to functionality in all versions...
Medium - CVE-2024-9618 - The Master Addons – Elementor Addons with White...
The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets...
Medium - CVE-2025-0433 - The Master Addons – Elementor Addons with White...
The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter...
Medium - CVE-2025-0512 - The Structured Content (JSON-LD) #wpsc plugin...
The Structured Content (JSON-LD) #wpsc plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sc_fs_local_business shortcode in all versions up to, and including,...
Medium - CVE-2025-0370 - The WP Shortcodes Plugin — Shortcodes Ultimate...
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘src’ parameter in all versions up to, and including, 7.3.3 due to...