Skip to contentStellarwp vulnerabilities
Newest
- givewpWordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerabilityCVE-2023-236725.4 Medium
- stellarwp event ticketsWordPress Event Tickets and Registration plugin <= 5.11.0.4 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-387624.3 Medium
- stellarwp the events calendarWordPress The Events Calendar plugin <= 6.5.1.4 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-375184.3 Medium
- givewpWordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerabilityCVE-2023-471835.3 Medium
- givewpGive < 3.19.0 - Reflected XSSCVE-2024-119214.8 Medium
- stellarwp the events calendarThe Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event DisclosureCVE-2024-53335.3 Medium
- stellarwp the events calendar, the events calendar events calendar +1 moreWordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerabilityCVE-2023-357775.3 Medium
- stellarwp image widgetImage Widget < 4.4.11 - Admin+ Stored XSSCVE-2024-109394.8 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreKadence Blocks <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-125814.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-107856.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon WidgetCVE-2024-96556.4 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform, webdevmattcrom givewp donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code ExecutionCVE-2024-96349.8 Critical
- givew donation plugin and fundraising platform, givewp, stellarwp givewp – donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object InjectionCVE-2024-8353Public exploitEPSS 32.6%9.8 Critical
- stellarwp the events calendarThe Events Calendar <= 6.6.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-6931EPSS 16.7%7.2 High
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order ParameterCVE-2024-91307.2 High
- givewpWordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 3.15.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-473155.4 Medium
- stellarwp the events calendarThe Events Calendar <= 6.6.4 - Unauthenticated SQL InjectionCVE-2024-8275Public exploitEPSS 49.9%9.8 Critical
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 3.15.1 - Unauthenticated Full Path DisclosureCVE-2024-65515.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform, webdevmattcrom givewp donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings UpdateCVE-2024-59406.5 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information ExposureCVE-2024-59395.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code ExecutionCVE-2024-5932Public exploitEPSS 76.8%10.0 Critical
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File DeletionCVE-2024-59415.4 Medium
- givewpWordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerabilityCVE-2024-3709910.0 Critical
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post ActionsCVE-2024-59775.4 Medium
- stellarwp learndash lms – reportsLearnDash LMS - Reports Free <= 1.8.2.1 - Missing Authorization to Plugin Settings UpdateCVE-2024-56485.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.45 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data AttributesCVE-2024-58196.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting in Google Maps WidgetCVE-2024-52896.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleFont ParameterCVE-2024-48636.4 Medium
- stellarwp the events calendar, unknown events-calendar-pro, theeventscalendar events calendar pro +2 moreThe Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events AccessCVE-2024-12956.5 Medium
- givewpWordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-356797.1 High
- stellarwp the events calendarThe Events Calendar < 6.4.0.1 - Reflected XSSCVE-2024-41809.1 Critical
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-37146.4 Medium
- givewpWordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerabilityCVE-2023-416658.8 High
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typer EffectCVE-2024-42086.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.37 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-31895.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown TimerCVE-2024-42096.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks with AI by Kadence WP <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block LinkCVE-2024-44816.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.34 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-22736.4 Medium
- britner virtueVirtue <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post AuthorCVE-2024-40346.4 Medium
- liquidweb restrict contentWordPress Restrict Content plugin <= 3.2.8 - Broken Access Control vulnerabilityCVE-2024-314325.3 Medium
- stellarwp the events calendarWordPress The Events Calendar plugin <= 6.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-314334.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-19576.4 Medium
- givewpWordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerabilityCVE-2022-402115.9 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-14246.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial WidgetCVE-2024-19996.4 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF)CVE-2023-69648.5 High
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks <= 3.2.17 - Authenticated(Editor+) Stored Cross-Site Scripting via Contact Form Message SettingsCVE-2024-05984.4 Medium
- stellarwp event tickets and registrationEvent Tickets and Registration <= 5.8.2 - Improper Authorization to Information DisclosureCVE-2024-22614.3 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via CountUp WidgetCVE-2024-29196.4 Medium
- Show moreLoading…