Vulnerability database

41,580 results · page 629 of 832

• Feb 23, 2024Colibri WP: Cross-Site Request ForgeryCVE-2024-1360 · WordPress plugins & themes · reported by WordfenceMedium 4.3

  The Colibri WP theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.94. This is due to missing or incorrect nonce validation on the colibriwp_install_plugin() function. This makes it possible for unauthenticated attackers to install recommended plugins via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

  Product

  Colibri WP

  Affected

  up to 1.0.94

  What to do

  Affects up to 1.0.94. Update Colibri WP to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordthemes.trac.wordpress.orgwordfence.com

• Feb 23, 2024Page Builder: Pagelayer – Drag and Drop website builder: Stored Cross-Site ScriptingCVE-2024-1590 · WordPress plugins & themes · reported by WordfenceMedium 4.6

  The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button Widget in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

  Product

  Page Builder: Pagelayer – Drag and Drop website builder

  Affected

  up to 1.8.2

  What to do

  Affects up to 1.8.2. Update Page Builder: Pagelayer – Drag and Drop website builder to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 23, 2024SocialDriver: 2024 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties resulting in a cross-site scripting (XSS) attackCVE-2023-4826 · WordPress plugins & themes · reported by WPScanMedium 6.1

  The SocialDriver WordPress theme before version 2024 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties resulting in a cross-site scripting (XSS) attack.

  Product

  SocialDriver

  Fixed in

  2024

  What to do

  Update SocialDriver to 2024 or newer.

  Full record and what to do →NVD recordsocialdriver.comwpscan.com

• Feb 23, 2024Admin side data storage for Contact Form 7: Unauthorized modification of dataCVE-2024-1779 · WordPress plugins & themes · reported by WordfenceMedium 5.3

  The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the zt_dcfcf_change_status() function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to alter the message read status of messages.

  Product

  Admin side data storage for Contact Form 7

  Affected

  up to 1.1.1

  What to do

  Affects up to 1.1.1. Update Admin side data storage for Contact Form 7 to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 23, 2024Admin side data storage for Contact Form 7: Unauthorized modification of dataCVE-2024-1778 · WordPress plugins & themes · reported by WordfenceMedium 4.3

  The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the zt_dcfcf_change_bookmark() function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to alter bookmark statuses.

  Product

  Admin side data storage for Contact Form 7

  Affected

  up to 1.1.1

  What to do

  Affects up to 1.1.1. Update Admin side data storage for Contact Form 7 to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 23, 2024Admin side data storage for Contact Form 7: Cross-Site Request ForgeryCVE-2024-1777 · WordPress plugins & themes · reported by WordfenceMedium 4.3

  The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the settings update function. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

  Product

  Admin side data storage for Contact Form 7

  Affected

  up to 1.1.1

  What to do

  Affects up to 1.1.1. Update Admin side data storage for Contact Form 7 to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 23, 2024Admin side data storage for Contact Form 7: SQL InjectionCVE-2024-1776 · WordPress plugins & themes · reported by WordfenceHigh 7.2

  The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'form-id' parameter in all versions up to, and including, 1.1.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

  Product

  Admin side data storage for Contact Form 7

  Affected

  up to 1.1.1

  What to do

  Affects up to 1.1.1. Update Admin side data storage for Contact Form 7 to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 22, 2024Event Tickets and Registration: Unauthorized access of dataCVE-2024-1053 · WordPress plugins & themes · reported by WordfenceMedium 4.3

  The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'email' action in all versions up to, and including, 5.8.1. This makes it possible for authenticated attackers, with contributor-level access and above, to email the attendees list to themselves.

  Product

  Event Tickets and Registration

  Affected

  up to 5.8.1

  What to do

  Affects up to 5.8.1. Update Event Tickets and Registration to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 22, 2024User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds: Stored Cross-Site ScriptingCVE-2024-0903 · WordPress plugins & themes · reported by WordfenceMedium 5.4

  The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_submitted' 'link' value in all versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in the feedback submission page that will execute when a user clicks the link, while also pressing the command key.

  Product

  User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds

  Affected

  up to 1.0.13

  What to do

  Affects up to 1.0.13. Update User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 21, 2024FG PrestaShop to WooCommerce: Cross-Site Request Forgery (CSRF)CVE-2024-24837 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce, Frédéric GILLES FG Drupal to WordPress, Frédéric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; FG Joomla to WordPress: from n/a through 4.15.0.

  Product

  FG PrestaShop to WooCommerce

  Affected

  up to 4.44.3

  What to do

  Affects up to 4.44.3. Update FG PrestaShop to WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 21, 2024JTRT Responsive Tables: Cross-Site Request Forgery (CSRF)CVE-2024-24802 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in John Tendik JTRT Responsive Tables.This issue affects JTRT Responsive Tables: from n/a through 4.1.9.

  Product

  JTRT Responsive Tables

  Affected

  up to 4.1.9

  What to do

  Affects up to 4.1.9. Update JTRT Responsive Tables to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 21, 2024Debug: Cross-Site Request Forgery (CSRF)CVE-2024-24798 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10.

  Product

  Debug

  Affected

  up to 1.10

  What to do

  Affects up to 1.10. Update Debug to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 21, 2024Multi Step Form: Cross-Site Request Forgery (CSRF)CVE-2024-25905 · WordPress plugins & themes · reported by PatchstackMedium 5.4

  Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form.This issue affects Multi Step Form: from n/a through 1.7.18.

  Product

  Multi Step Form

  Affected

  up to 1.7.18

  What to do

  Affects up to 1.7.18. Update Multi Step Form to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 21, 2024TinyMCE and TinyMCE Advanced Professsional Formats and Styles: Cross-Site Request Forgery (CSRF)CVE-2024-25904 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in David Stockl TinyMCE and TinyMCE Advanced Professsional Formats and Styles.This issue affects TinyMCE and TinyMCE Advanced Professsional Formats and Styles: from n/a through 1.1.2.

  Product

  TinyMCE and TinyMCE Advanced Professsional Formats and Styles

  Affected

  up to 1.1.2

  What to do

  Affects up to 1.1.2. Update TinyMCE and TinyMCE Advanced Professsional Formats and Styles to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 21, 2024Admin Menu Editor: Cross-Site Request Forgery (CSRF)CVE-2024-24876 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor.This issue affects Admin Menu Editor: from n/a through 1.12.

  Product

  Admin Menu Editor

  Affected

  up to 1.12

  What to do

  Affects up to 1.12. Update Admin Menu Editor to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 21, 2024Themify Builder: Cross-Site Request Forgery (CSRF)CVE-2024-24872 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in Themify Themify Builder.This issue affects Themify Builder: from n/a through 7.0.5.

  Product

  Themify Builder

  Affected

  up to 7.0.5

  What to do

  Affects up to 7.0.5. Update Themify Builder to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 21, 2024Quicksand Post Filter jQuery: Cross-Site Request Forgery (CSRF)CVE-2024-24849 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in Mark Stockton Quicksand Post Filter jQuery Plugin.This issue affects Quicksand Post Filter jQuery Plugin: from n/a through 3.1.1.

  Product

  Quicksand Post Filter jQuery

  Affected

  up to 3.1.1

  What to do

  Affects up to 3.1.1. Update Quicksand Post Filter jQuery to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 21, 2024PowerPack Pro for Elementor: Cross-Site Request Forgery (CSRF)CVE-2024-24843 · WordPress plugins & themes · reported by PatchstackHigh 7.1

  Cross-Site Request Forgery (CSRF) vulnerability in PowerPack Addons for Elementor PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a before 2.10.8.

  Product

  PowerPack Pro for Elementor

  Fixed in

  2.10.8

  What to do

  Update PowerPack Pro for Elementor to 2.10.8 or newer.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 21, 20243D FlipBook – PDF Flipbook: Stored Cross-Site ScriptingCVE-2024-1081 · WordPress plugins & themes · reported by WordfenceMedium 6.4

  The 3D FlipBook – PDF Flipbook WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bookmark feature in all versions up to, and including, 1.15.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

  Product

  3D FlipBook – PDF Flipbook

  Affected

  up to 1.15.3

  What to do

  Affects up to 1.15.3. Update 3D FlipBook – PDF Flipbook to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 21, 2024Simple Job Board: Unauthorized access of data|CVE-2024-0593 · WordPress plugins & themes · reported by WordfenceMedium 5.3

  The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.

  Product

  Simple Job Board

  Affected

  up to 2.10.8

  What to do

  Affects up to 2.10.8. Update Simple Job Board to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 20, 2024WooCommerce Google Sheet Connector: Unauthorized modification of dataCVE-2024-1562 · WordPress plugins & themes · reported by WordfenceMedium 5.3

  The WooCommerce Google Sheet Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the execute_post_data function in all versions up to, and including, 1.3.11. This makes it possible for unauthenticated attackers to update plugin settings.

  Product

  WooCommerce Google Sheet Connector

  Affected

  up to 1.3.11

  What to do

  Affects up to 1.3.11. Update WooCommerce Google Sheet Connector to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 20, 2024Database Reset: Cross-Site Request ForgeryCVE-2024-1501 · WordPress plugins & themes · reported by WordfenceMedium 4.7

  The Database Reset plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.22. This is due to missing or incorrect nonce validation on the install_wpr() function. This makes it possible for unauthenticated attackers to install the WP Reset Plugin via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

  Product

  Database Reset

  Affected

  up to 3.22

  What to do

  Affects up to 3.22. Update Database Reset to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org

• Feb 20, 2024Plugin Groups: Unauthorized modification of dataCVE-2024-1108 · WordPress plugins & themes · reported by WordfenceMedium 6.5

  The Plugin Groups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_init() function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to change the settings of the plugin, which can also cause a denial of service due to a misconfiguration.

  Product

  Plugin Groups

  Affected

  up to 2.0.6

  What to do

  Affects up to 2.0.6. Update Plugin Groups to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 19, 2024Link Library: Stored Cross-Site ScriptingCVE-2024-1559 · WordPress plugins & themes · reported by WordfenceMedium 6.5

  The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'll_reciprocal' parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

  Product

  Link Library

  Affected

  up to 7.6

  What to do

  Affects up to 7.6. Update Link Library to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 19, 2024WP Shortcodes Plugin — Shortcodes Ultimate: Stored Cross-Site ScriptingCVE-2024-1510 · WordPress plugins & themes · reported by WordfenceMedium 6.4

  The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_tooltip shortcode in all versions up to, and including, 7.0.2 due to insufficient input sanitization and output escaping on user supplied attributes and user supplied tags. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

  Product

  WP Shortcodes Plugin — Shortcodes Ultimate

  Affected

  up to 7.0.2

  What to do

  Affects up to 7.0.2. Update WP Shortcodes Plugin — Shortcodes Ultimate to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org

• Feb 17, 2024MasterStudy LMS WordPress Plugin – for Online Courses and Education: Union based SQL InjectionCVE-2024-1512 · WordPress plugins & themes · reported by WordfenceCritical 9.8

  The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

  Product

  MasterStudy LMS WordPress Plugin – for Online Courses and Education

  Affected

  up to 3.2.5

  What to do

  Affects up to 3.2.5. Update MasterStudy LMS WordPress Plugin – for Online Courses and Education to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 17, 2024Piraeus Bank WooCommerce Payment Gateway: Time-based blind SQL InjectionCVE-2024-0610 · WordPress plugins & themes · reported by WordfenceCritical 9.8

  The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'MerchantReference' parameter in all versions up to, and including, 1.6.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

  Product

  Piraeus Bank WooCommerce Payment Gateway

  Affected

  up to 1.6.5.1

  What to do

  Affects up to 1.6.5.1. Update Piraeus Bank WooCommerce Payment Gateway to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 15, 2024Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages: Sensitive Information ExposureCVE-2024-0708 · WordPress plugins & themes · reported by WordfenceMedium 5.3

  The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.2. This makes it possible for unauthenticated attackers to access landing pages that may not be public.

  Product

  Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages

  Affected

  up to 1.7.2

  What to do

  Affects up to 1.7.2. Update Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 13, 2024Bold Page Builder: Stored Cross-Site ScriptingCVE-2024-1160 · WordPress plugins & themes · reported by WordfenceMedium 5.4

  The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Link in all versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2024-30442 is likely a duplicate of this issue.

  Product

  Bold Page Builder

  Affected

  up to 4.8.0

  What to do

  Affects up to 4.8.0. Update Bold Page Builder to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 13, 2024Bold Page Builder: Stored Cross-Site ScriptingCVE-2024-1159 · WordPress plugins & themes · reported by WordfenceMedium 6.4

  The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

  Product

  Bold Page Builder

  Affected

  up to 4.8.0

  What to do

  Affects up to 4.8.0. Update Bold Page Builder to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com

• Feb 13, 2024Bold Page Builder: Stored Cross-Site ScriptingCVE-2024-1157 · WordPress plugins & themes · reported by WordfenceMedium 5.4

  The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button URL in all versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

  Product

  Bold Page Builder

  Affected

  up to 4.8.0

  What to do

  Affects up to 4.8.0. Update Bold Page Builder to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org

• Feb 13, 2024SMTP Mail: Cross-Site Request Forgery (CSRF)CVE-2024-25914 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in Photoboxone SMTP Mail.This issue affects SMTP Mail: from n/a through 1.3.20.

  Product

  SMTP Mail

  Affected

  up to 1.3.20

  What to do

  Affects up to 1.3.20. Update SMTP Mail to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 12, 2024Smart Manager: Does not properly sanitise and escape a parameter before using it in a SQL statementCVE-2024-0566 · WordPress plugins & themes · reported by WPScanHigh 7.2

  The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.

  Product

  Smart Manager

  Fixed in

  8.28.0

  What to do

  Update Smart Manager to 8.28.0 or newer.

  Full record and what to do →NVD recordwpscan.comwpscan.com

• Feb 12, 2024MapPress Maps for: Is affected by an IDORCVE-2024-0421 · WordPress plugins & themes · reported by WPScanMedium 5.3

  The MapPress Maps for WordPress plugin before 2.88.16 is affected by an IDOR as it does not ensure that posts to be retrieve via an AJAX action is a public map, allowing unauthenticated users to read arbitrary private and draft posts.

  Product

  MapPress Maps for

  Fixed in

  2.88.16

  What to do

  Update MapPress Maps for to 2.88.16 or newer.

  Full record and what to do →NVD recordwpscan.comwpscan.com

• Feb 12, 2024MapPress Maps for: Does not sanitize and escape the map titleCVE-2024-0420 · WordPress plugins & themes · reported by WPScanMedium 5.4

  The MapPress Maps for WordPress plugin before 2.88.15 does not sanitize and escape the map title when outputting it back in the admin dashboard, allowing Contributors and above roles to perform Stored Cross-Site Scripting attacks

  Product

  MapPress Maps for

  Fixed in

  2.88.15

  What to do

  Update MapPress Maps for to 2.88.15 or newer.

  Full record and what to do →NVD recordwpscan.comwpscan.com

• Feb 12, 2024Analytics Insights for Google Analytics 4 (AIWP): Is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callbackCVE-2024-0250 · WordPress plugins & themes · reported by WPScanMedium 6.1

  The Analytics Insights for Google Analytics 4 (AIWP) WordPress plugin before 6.3 is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

  Product

  Analytics Insights for Google Analytics 4 (AIWP)

  Fixed in

  6.3

  What to do

  Update Analytics Insights for Google Analytics 4 (AIWP) to 6.3 or newer.

  Full record and what to do →NVD recordwpscan.comwpscan.com

• Feb 12, 2024EazyDocs: Re-introduced CVE-2023-6029 (https://wpscanCVE-2024-0248 · WordPress plugins & themes · reported by WPScanMedium 4.3

  The EazyDocs WordPress plugin before 2.4.0 re-introduced CVE-2023-6029 (https://wpscan.com/vulnerability/7a0aaf85-8130-4fd7-8f09-f8edc929597e/) in 2.3.8, allowing any authenticated users, such as subscriber to delete arbitrary posts, as well as add and delete documents/sections. The issue was partially fixed in 2.3.9.

  Product

  EazyDocs

  Fixed in

  2.4.0

  What to do

  Update EazyDocs to 2.4.0 or newer.

  Full record and what to do →NVD recordwpscan.comwpscan.com

• Feb 12, 2024GigPress: Does not sanitise and escape some of its settingsCVE-2023-7233 · WordPress plugins & themes · reported by WPScanMedium 4.8

  The GigPress WordPress plugin through 2.3.29 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

  Product

  GigPress

  Affected

  up to 2.3.29

  What to do

  Affects up to 2.3.29. Update GigPress to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordwpscan.comwpscan.com

• Feb 12, 2024Popup Box: Does not sanitise and escape some of its settingsCVE-2023-6591 · WordPress plugins & themes · reported by WPScanMedium 4.8

  The Popup Box WordPress plugin before 20.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

  Product

  Popup Box

  Fixed in

  20.9.0

  What to do

  Update Popup Box to 20.9.0 or newer.

  Full record and what to do →NVD recordwpscan.comwpscan.com

• Feb 12, 2024Splashscreen: Does not have CSRF check in placeCVE-2023-6501 · WordPress plugins & themes · reported by WPScanMedium 4.3

  The Splashscreen WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

  Product

  Splashscreen

  Affected

  up to 0.20

  What to do

  Affects up to 0.20. Update Splashscreen to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordmagos-securitas.comwpscan.com

• Feb 12, 2024lasTunes: Does not have CSRF check in some placesCVE-2023-6499 · WordPress plugins & themes · reported by WPScanMedium 5.4

  The lasTunes WordPress plugin through 3.6.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

  Product

  lasTunes

  Affected

  up to 3.6.1

  What to do

  Affects up to 3.6.1. Update lasTunes to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordwpscan.comwpscan.com

• Feb 12, 2024Popup Builder: Does not validate a parameter before making a request to itCVE-2023-6294 · WordPress plugins & themes · reported by WPScanHigh 7.2

  The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could allow users with the administrator role to perform SSRF attack in Multisite WordPress configurations.

  Product

  Popup Builder

  Fixed in

  4.2.6

  What to do

  Update Popup Builder to 4.2.6 or newer.

  Full record and what to do →NVD recordwpscan.comwpscan.com

• Feb 12, 2024chartjs: Does not sanitise and escape some of its settingsCVE-2023-6082 · WordPress plugins & themes · reported by WPScanMedium 5.4

  The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

  Product

  chartjs

  Affected

  up to 2023.2

  What to do

  Affects up to 2023.2. Update chartjs to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordlynk.nlwpscan.com

• Feb 12, 2024chartjs: Does not sanitise and escape some of its settingsCVE-2023-6081 · WordPress plugins & themes · reported by WPScanMedium 5.4

  The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

  Product

  chartjs

  Affected

  up to 2023.2

  What to do

  Affects up to 2023.2. Update chartjs to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordlynk.nlwpscan.com

• Feb 12, 2024Web3: Is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and 'hadle_login_request'CVE-2023-6036 · WordPress plugins & themes · reported by WPScanCritical 9.8

  The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and 'hadle_login_request'. This makes it possible for non authenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.

  Product

  Web3

  Fixed in

  3.0.0

  What to do

  Update Web3 to 3.0.0 or newer.

  Full record and what to do →NVD recordwpscan.comwpscan.com

• Feb 12, 2024Basic Log Viewer: Cross-Site Request Forgery (CSRF)CVE-2024-24935 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in WpSimpleTools Basic Log Viewer.This issue affects Basic Log Viewer: from n/a through 1.0.4.

  Product

  Basic Log Viewer

  Affected

  up to 1.0.4

  What to do

  Affects up to 1.0.4. Update Basic Log Viewer to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 12, 2024WP Contact Form: Cross-Site Request Forgery (CSRF)CVE-2024-24929 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in Ryan Duff, Peter Westwood WP Contact Form.This issue affects WP Contact Form: from n/a through 1.6.

  Product

  WP Contact Form

  Affected

  up to 1.6

  What to do

  Affects up to 1.6. Update WP Contact Form to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 12, 2024Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for: Cross-Site Request Forgery (CSRF)CVE-2024-24887 · WordPress plugins & themes · reported by PatchstackMedium 5.4

  Cross-Site Request Forgery (CSRF) vulnerability in Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress.This issue affects Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress: from n/a through 21.2.8.4.

  Product

  Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for

  Affected

  up to 21.2.8.4

  What to do

  Affects up to 21.2.8.4. Update Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 12, 2024Contact Form 7 Connector: Cross-Site Request Forgery (CSRF)CVE-2024-24884 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in ARI Soft Contact Form 7 Connector.This issue affects Contact Form 7 Connector: from n/a through 1.2.2.

  Product

  Contact Form 7 Connector

  Affected

  up to 1.2.2

  What to do

  Affects up to 1.2.2. Update Contact Form 7 Connector to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

• Feb 12, 2024Link Library: Cross-Site Request Forgery (CSRF)CVE-2024-24875 · WordPress plugins & themes · reported by PatchstackMedium 4.3

  Cross-Site Request Forgery (CSRF) vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13.

  Product

  Link Library

  Affected

  up to 7.5.13

  What to do

  Affects up to 7.5.13. Update Link Library to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordpatchstack.compatchstack.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.