791
|
6.1 |
MEDIUM
Network
|
-
|
-
|
The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL …
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-8871
|
2024-10-30 15:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
792
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_search_users function in all versions up to, and including, …
New
|
CWE-862
Missing Authorization
|
CVE-2024-10399
|
2024-10-30 15:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
793
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidu_map' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitiz…
New
|
-
|
CVE-2024-9886
|
2024-10-30 12:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
794
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Widget or Sidebar Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sidebar' shortcode in all versions up to, and including, 0.6.1 due to insufficient …
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-9885
|
2024-10-30 12:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
795
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The T(-) Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tminus' shortcode in all versions up to, and including, 2.4.8 due to insufficient input sanitiza…
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-9884
|
2024-10-30 12:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
796
|
7.3 |
HIGH
Network
-
|
-
|
The The Enable Shortcodes inside Widgets,Comments and Experts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.0. This is due to the softw…
New
|
CWE-94
Code Injection
|
CVE-2024-9846
|
2024-10-30 12:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
797
|
6.1 |
MEDIUM
Network
|
-
|
-
|
The Subscribe to Comments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and inclu…
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-8792
|
2024-10-30 12:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
798
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Ultimate TinyMCE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field' shortcode in all versions up to, and including, 5.7 due to insufficient input sanitization and o…
New
|
-
|
CVE-2024-8627
|
2024-10-30 12:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
799
|
- |
|
-
|
-
|
A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulati…
New
|
-
|
CVE-2024-10509
|
2024-10-30 12:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
800
|
- |
|
-
|
-
|
A vulnerability classified as critical was found in Codezips Free Exam Hall Seating Management System 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argu…
New
|
CWE-89
SQL Injection
|
CVE-2024-10507
|
2024-10-30 12:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|