811
|
6.5 |
MEDIUM
Network
|
-
|
-
|
The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the s…
|
CWE-862
Missing Authorization
|
CVE-2024-13370
|
2025-01-25 17:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
812
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the y…
|
CWE-862
Missing Authorization
|
CVE-2024-13368
|
2025-01-25 17:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
813
|
6.5 |
MEDIUM
Network
|
-
|
-
|
The Connections Business Directory plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation when deleting a connections image directory in all versi…
|
CWE-22
Path Traversal
|
CVE-2024-12885
|
2025-01-25 17:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
814
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooh_action_settings_save_frontend() funct…
|
CWE-862
Missing Authorization
|
CVE-2024-12826
|
2025-01-25 17:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
815
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Etsy Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'product_link' shortcode in all versions up to, and including, 1.4.2 due to insufficient input san…
|
CWE-79
Cross-site Scripting
|
CVE-2024-12817
|
2025-01-25 17:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
816
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The NOTICE BOARD BY TOWKIR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'notice-board' shortcode in all versions up to, and including, 3.1 due to insufficient in…
|
CWE-79
Cross-site Scripting
|
CVE-2024-12816
|
2025-01-25 17:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
817
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The brodos.net Onlineshop Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'BrodosCategory' shortcode in all versions up to, and including, 2.0.2 due to insuf…
|
CWE-79
Cross-site Scripting
|
CVE-2024-12529
|
2025-01-25 17:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
818
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Ask Me Anything (Anonymously) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'askmeanythingpeople' shortcode in all versions up to, and including, 1.6 due to i…
|
CWE-79
Cross-site Scripting
|
CVE-2024-12512
|
2025-01-25 17:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
819
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on…
|
CWE-862
Missing Authorization
|
CVE-2024-12113
|
2025-01-25 17:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
820
|
6.1 |
MEDIUM
Network
|
-
|
-
|
The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the…
|
CWE-79
Cross-site Scripting
|
CVE-2024-12076
|
2025-01-25 17:15 |
2025-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|