NA - CVE-2024-10560 - The Form Maker by 10Web WordPress plugin...
The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site...
NA - CVE-2024-10565 - The Slider by 10Web WordPress plugin before...
The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting...
NA - CVE-2024-10566 - The Slider by 10Web WordPress plugin before...
The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting...
NA - CVE-2024-10638 - The Product Labels For Woocommerce (Sale...
The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.11 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection...
NA - CVE-2024-10679 - The Quiz and Survey Master (QSM) WordPress...
The Quiz and Survey Master (QSM) WordPress plugin before 9.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site...
NA - CVE-2024-10703 - The Registrations for the Events Calendar...
The Registrations for the Events Calendar WordPress plugin before 2.13.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored...
NA - CVE-2024-11272 - The Contact Form & SMTP Plugin for WordPress by...
The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to...
NA - CVE-2024-11273 - The Contact Form & SMTP Plugin for WordPress by...
The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to...
NA - CVE-2024-11503 - The WP Tabs WordPress plugin before 2.2.7 does...
The WP Tabs WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks...
NA - CVE-2024-12109 - The Product Labels For Woocommerce (Sale...
The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection...