NA - CVE-2024-12343 - A vulnerability classified as critical has been...
A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request...
NA - CVE-2024-12344 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unknown part of the component FTP USER Command Handler. The manipulation leads to...
Medium - CVE-2024-10046 - The ?????? ????? ??????? Persian WooCommerce...
The ?????? ????? ??????? Persian WooCommerce SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in...
Medium - CVE-2024-11329 - The Comfino Payment Gateway plugin for...
The Comfino Payment Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all...
Medium - CVE-2024-11353 - The SMS for Lead Capture Forms plugin for...
The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_message() function in all versions up to, and...
Medium - CVE-2024-11436 - The Drag & Drop Builder, Human Face Detector,...
The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the...
Medium - CVE-2024-11451 - The Zooom plugin for WordPress is vulnerable to...
The Zooom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zooom' shortcode in all versions up to, and including, 1.1.0 due to insufficient input...
Medium - CVE-2024-11904 - The ???? ??? plugin for WordPress is vulnerable...
The ???? ??? plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'msntt_add_plus_talk' shortcode in all versions up to, and including, 1.2.0 due to...
Medium - CVE-2024-11943 - The ????? ?? ???? – ???? ?? ???? plugin for...
The ????? ?? ???? – ???? ?? ???? plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to,...