Medium - CVE-2024-11749 - The App Embed plugin for WordPress is...
The App Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'appizy' shortcode in all versions up to, and including, 2.3.2 due to insufficient...
Medium - CVE-2024-11756 - The SweepWidget Contests, Giveaways, Photo...
The SweepWidget Contests, Giveaways, Photo Contests, Competitions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sweepwidget' shortcode in all...
Medium - CVE-2024-11887 - The Geo Content plugin for WordPress is...
The Geo Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'geotargetlygeocontent' shortcode in all versions up to, and including, 6.0 due to...
Medium - CVE-2024-12073 - The Meteor Slides plugin for WordPress is...
The Meteor Slides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slide_url_value' parameter in all versions up to, and including, 1.5.7 due to insufficient...
Medium - CVE-2024-12261 - The SmartEmailing.cz plugin for WordPress is...
The SmartEmailing.cz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'se-lists-updated' parameter in all versions up to, and including, 2.2.0 due to...
Medium - CVE-2024-12383 - The Binary MLM Woocommerce plugin for WordPress...
The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the...
Medium - CVE-2024-12384 - The Binary MLM Woocommerce plugin for WordPress...
The Binary MLM Woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page’ parameter in all versions up to, and including, 2.0 due to insufficient input...
Medium - CVE-2024-12438 - The WooCommerce Digital Content Delivery (incl....
The WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'start_date’ and 'end_date' parameters...
Medium - CVE-2024-12439 - The Marketplace Items plugin for WordPress is...
The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marketplace' shortcode in all versions up to, and including, 1.5.5 due to...
Medium - CVE-2024-12440 - The Candifly plugin for WordPress is vulnerable...
The Candifly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'candifly' shortcode in all versions up to, and including, 1.0.6 due to insufficient...