NA - CVE-2024-10102 - The Photo Gallery, Images, Slider in Rbs Image...
The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its Gallery settings, which could allow high privilege users such as...
Medium - CVE-2024-10536 - The FancyPost – Best Ultimate Post Block, Post...
The FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing...
NA - CVE-2024-10562 - The Form Maker by 10Web WordPress plugin...
The Form Maker by 10Web WordPress plugin before 1.15.31 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site...
Medium - CVE-2024-11369 - The Store credit / Gift cards for woocommerce...
The Store credit / Gift cards for woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'coupon', 'start_date', and 'end_date'...
NA - CVE-2024-11606 - The Tabs Shortcode WordPress plugin through...
The Tabs Shortcode WordPress plugin through 2.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could...
Medium - CVE-2024-11749 - The App Embed plugin for WordPress is...
The App Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'appizy' shortcode in all versions up to, and including, 2.3.2 due to insufficient...
Medium - CVE-2024-11756 - The SweepWidget Contests, Giveaways, Photo...
The SweepWidget Contests, Giveaways, Photo Contests, Competitions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sweepwidget' shortcode in all...
Medium - CVE-2024-11887 - The Geo Content plugin for WordPress is...
The Geo Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'geotargetlygeocontent' shortcode in all versions up to, and including, 6.0 due to...
Medium - CVE-2024-12073 - The Meteor Slides plugin for WordPress is...
The Meteor Slides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slide_url_value' parameter in all versions up to, and including, 1.5.7 due to insufficient...
Medium - CVE-2024-12261 - The SmartEmailing.cz plugin for WordPress is...
The SmartEmailing.cz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'se-lists-updated' parameter in all versions up to, and including, 2.2.0 due to...