CVE ID : CVE-2024-13551 Published : Jan. 25, 2025, 8:15 a.m. | 29 minutes ago Description : The ABC Notation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s ‘abcjs’ shortcode in all versions up to, and including, 6.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes […]
CVE ID : CVE-2024-13550 Published : Jan. 25, 2025, 8:15 a.m. | 29 minutes ago Description : The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.1.3 via the ‘file’ attribute of the ‘abcjs’ shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, […]
CVE ID : CVE-2024-13548 Published : Jan. 25, 2025, 8:15 a.m. | 29 minutes ago Description : The Power Ups for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s ‘magic-button’ shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. […]
CVE ID : CVE-2024-13586 Published : Jan. 25, 2025, 8:15 a.m. | 29 minutes ago Description : The Masy Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s ‘justified-gallery’ shortcode in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes […]
CVE ID : CVE-2024-13467 Published : Jan. 25, 2025, 8:15 a.m. | 29 minutes ago Description : The WP Contact Form7 Email Spam Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it […]
CVE ID : CVE-2024-13458 Published : Jan. 25, 2025, 8:15 a.m. | 29 minutes ago Description : The WordPress SEO Friendly Accordion FAQ with AI assisted content generation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s ‘noticefaq’ shortcode in all versions up to, and including, 2.2.1 due to insufficient input sanitization and […]
CVE ID : CVE-2024-13441 Published : Jan. 25, 2025, 8:15 a.m. | 29 minutes ago Description : The Bilingual Linker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bl_otherlang_link_1 parameter in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, […]
CVE ID : CVE-2024-13370 Published : Jan. 25, 2025, 8:15 a.m. | 29 minutes ago Description : The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the save_addon_key_license() function in all versions up to, and including, […]
CVE ID : CVE-2024-13368 Published : Jan. 25, 2025, 8:15 a.m. | 29 minutes ago Description : The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the youzify_offer_banner() function in all versions up to, and including, […]
CVE ID : CVE-2024-12885 Published : Jan. 25, 2025, 8:15 a.m. | 29 minutes ago Description : The Connections Business Directory plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation when deleting a connections image directory in all versions up to, and including, 10.4.66. This makes it possible for authenticated […]
Unit A5, Endeavour Business Park
Penner Road, Havant
PO9 1QN
Company Registration Number: 5334133
Company VAT Number: 855 7246 95
