221
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The R Animated Icon Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and …
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-9272
|
2024-10-1 17:15 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
222
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Relogo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.4.2 due to insufficient input sanitization and output escapin…
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-9269
|
2024-10-1 17:15 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
223
|
6.1 |
MEDIUM
Network
|
-
|
-
|
The Easy WordPress Subscribe – Optin Hound plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions…
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-9267
|
2024-10-1 17:15 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
224
|
- |
|
-
|
-
|
Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz (legacy) Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user…
New
|
-
|
CVE-2024-9145
|
2024-10-1 17:15 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
225
|
- |
|
-
|
-
|
The SVG Complete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output e…
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-9119
|
2024-10-1 17:15 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
226
|
9.8 |
CRITICAL
Network
-
|
-
|
The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convert_remoteimage_to_local' function in versions up to, and inc…
New
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-9108
|
2024-10-1 17:15 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
227
|
9.8 |
CRITICAL
Network
-
|
-
|
The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during…
New
|
CWE-288
Authentication Bypass Using an Alternate Path or Channel
|
CVE-2024-9106
|
2024-10-1 17:15 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
228
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Geo Mashup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's geo_mashup_visible_posts_list shortcode in all versions up to, and including, 1.13.13 due to insuffic…
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-8990
|
2024-10-1 17:15 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
229
|
- |
|
-
|
-
|
The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stars_testimonials…
New
|
-
|
CVE-2024-8989
|
2024-10-1 17:15 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
230
|
6.1 |
MEDIUM
Network
|
-
|
-
|
The Easy Load More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1…
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-8728
|
2024-10-1 17:15 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|