Medium - CVE-2024-8254 - The Email Subscribers by Icegram Express –...
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions...
Medium - CVE-2024-8800 - The RabbitLoader – Website Speed Optimization...
The RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due...
Medium - CVE-2024-8967 - The PWA — easy way to Progressive Web App...
The PWA — easy way to Progressive Web App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.3 due to insufficient...
Medium - CVE-2024-9172 - The Demo Importer Plus plugin for WordPress is...
The Demo Importer Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0.1 due to insufficient input sanitization and...
Medium - CVE-2024-9210 - The MC4WP: Mailchimp Top Bar plugin for...
The MC4WP: Mailchimp Top Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and...
Medium - CVE-2024-9222 - The Paid Membership Subscriptions – Effortless...
The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of...
Medium - CVE-2024-9225 - The SEOPress – On-site SEO plugin for WordPress...
The SEOPress – On-site SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all...
Medium - CVE-2024-9218 - The Magazine Blocks – Blog Designer, Magazine &...
The Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the...
NA - CVE-2024-9344 - The BerqWP – Automated All-In-One PageSpeed...
The BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via...
Medium - CVE-2024-9378 - The YML for Yandex Market plugin for WordPress...
The YML for Yandex Market plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 4.7.2 due to insufficient...