Medium - CVE-2024-12049 - The Woo Ukrposhta plugin for WordPress is...
The Woo Ukrposhta plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'order', 'post', and 'idd' parameters in all versions up to, and...
Medium - CVE-2024-12124 - The Role Includer plugin for WordPress is...
The Role Includer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘user_id’ parameter in all versions up to, and including, 1.6 due to insufficient input sanitization...
Medium - CVE-2024-12126 - The SEO Keywords plugin for WordPress is...
The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘google_error’ parameter in all versions up to, and including, 1.1.3 due to insufficient input...
Medium - CVE-2024-12140 - The Elementor Addons AI Addons – 70 Widgets,...
The Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.1 via the...
Medium - CVE-2024-12153 - The GDY Modular Content plugin for WordPress is...
The GDY Modular Content plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and...
High - CVE-2024-12157 - The Popup – MailChimp, GetResponse and...
The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'upc_delete_db_record' AJAX...
Medium - CVE-2024-12158 - The Popup – MailChimp, GetResponse and...
The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the...
Medium - CVE-2024-12159 - The Optimize Your Campaigns – Google Shopping –...
The Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the...
Medium - CVE-2024-12170 - The ViewMedica 9 plugin for WordPress is...
The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.15. This is due to missing or incorrect nonce validation on the...
Medium - CVE-2024-12176 - The WordLift – AI powered SEO – Schema plugin...
The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'wl_config_plugin' AJAX action in all versions up...