Wordpress Plugin vulnerabilities

Products

• Simple Buttons Creator 2
• Wp-cart-for-digital-products 2

Newest

• moc special feed items Special Feed Items <= 1.0.1 - Stored XSS via CSRF CVE-2024-8051 5.4 MediumSeptember 17, 2024
• rubayathasan infolinks ad wrap infolinks Ad Wrap <= 1.0.2 - Settings Update via CSRF CVE-2024-8044 6.5 MediumSeptember 17, 2024
• seanschulte vikinghammer tweet Vikinghammer Tweet <= 0.2.4 - Stored XSS via CSRF CVE-2024-8043 5.4 MediumSeptember 17, 2024
• projectzealous pz frontend manager pz-frontend-manager < 1.0.6 - CSRF change user profile picture CVE-2024-6244 Public exploit 8.8 HighJuly 22, 2024
• tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 more WP eStore < 8.5.5 - Reflected XSS in Discount Editing CVE-2024-6073 6.1 MediumJuly 15, 2024
• tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 more WP eStore < 8.5.5 - Reflected XSS via $_SERVER['REQUEST_URI'] CVE-2024-6072 6.1 MediumJuly 15, 2024
• unknown simple photoswipe Simple Photoswipe <= 0.1 - Admin+ Stored XSS CVE-2024-5473 4.0 MediumJune 26, 2024
• lepileppanen responsive video embed Responsive video embed < 0.5.1 - Contributor+ Stored XSS CVE-2024-5475 5.4 MediumJune 20, 2024
• davidjmiller similarity Similarity <= 3.0 - Stored XSS via CSRF CVE-2024-3972 4.3 MediumJune 14, 2024
• unknown agca, cusmin absolutely glamorous custom admin +1 more AGCA – Custom Dashboard & Login Page < 7.2.2 - Admin+ Stored XSS via Image URL CVE-2024-2907 6.8 MediumApril 25, 2024
• wordpress plugin hcaptcha, hcaptcha for wp +1 more hCaptcha for WordPress <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7-hcaptcha Shortcode CVE-2024-4014 6.4 MediumApril 20, 2024
• robbychen simple buttons creator Simple Buttons Creator <= 1.04 - Aribtrary Button Deletion via CSRF CVE-2024-2858 4.8 MediumApril 15, 2024
• robbychen simple buttons creator Simple Buttons Creator <= 1.04 - Unauthenticated Stored XSS CVE-2024-2857 6.1 MediumApril 15, 2024