Browse CVEs

HIGH 8.8 CVE-2024-53751 Cross-Site Request Forgery (CSRF) vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects … Build App Online after 1.0.22 Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53720 Cross-Site Request Forgery (CSRF) vulnerability in ole1986 WP-ISPConfig 3 wp-ispconfig3 allows Stored XSS.This issue affects WP-ISPConfig 3: from n/a… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53722 Cross-Site Request Forgery (CSRF) vulnerability in rockemmusic Favicon My Blog favicon-my-blog allows Stored XSS.This issue affects Favicon My Blog: … Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53723 Cross-Site Request Forgery (CSRF) vulnerability in acbaltaci Google Plus Share and +1 Button google-plus-share-and-plusone-button allows Stored XSS.T… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53724 Cross-Site Request Forgery (CSRF) vulnerability in ronnybull IceStats icestats allows Stored XSS.This issue affects IceStats: from n/a through <= 1.3. Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53725 Cross-Site Request Forgery (CSRF) vulnerability in aMiT Post Hits Counter hits-counter allows Reflected XSS.This issue affects Post Hits Counter: fro… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53726 Cross-Site Request Forgery (CSRF) vulnerability in RealtyCandy.com RealtyCandy IDX Broker Extended realtycandy-idx-broker-extended allows Stored XSS.… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53712 Cross-Site Request Forgery (CSRF) vulnerability in kevmimcc Kevin's kevins-plugin allows Stored XSS.This issue affects Kevin's: from n/a through <= 2… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53713 Cross-Site Request Forgery (CSRF) vulnerability in rickota Silverlight Video Player smooth-streaming-player allows Stored XSS.This issue affects Silv… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53714 Cross-Site Request Forgery (CSRF) vulnerability in Irish_Cathal Continue Shopping From Cart continue-shopping-from-cart-page allows Stored XSS.This i… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53715 Cross-Site Request Forgery (CSRF) vulnerability in Thomas Hoefter Simple Travel Map simple-travel-map allows Stored XSS.This issue affects Simple Tra… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53716 Cross-Site Request Forgery (CSRF) vulnerability in overtrue wp auto top wp-auto-top allows Stored XSS.This issue affects wp auto top: from n/a throug… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53717 Cross-Site Request Forgery (CSRF) vulnerability in yonisink yPHPlista yphplista allows Stored XSS.This issue affects yPHPlista: from n/a through <= 1… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53718 Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Multi Feed Reader multi-feed-reader allows Stored XSS.This issue affects Multi Feed R… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53719 Cross-Site Request Forgery (CSRF) vulnerability in onigetoc Zajax – Ajax Navigation zajax-ajax-navigation allows Stored XSS.This issue affects Zajax … Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53710 Cross-Site Request Forgery (CSRF) vulnerability in ITERAS ITERAS iteras allows Stored XSS.This issue affects ITERAS: from n/a through <= 1.8.0. Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53711 Cross-Site Request Forgery (CSRF) vulnerability in tranchesdunet Hotlink2Watermark hotlink2watermark allows Stored XSS.This issue affects Hotlink2Wat… Mitigation only Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-52477 Cross-Site Request Forgery (CSRF) vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affect… Mitigation only Fix from $1,9502024-12-02 HIGH 8.8 CVE-2024-52479 Cross-Site Request Forgery (CSRF) vulnerability in Astoundify Jobify jobify allows Cross Site Request Forgery.This issue affects Jobify: from n/a thr… Jobify 4.2.4+ Fix from $1,9502024-12-02 HIGH 7.1 CVE-2024-53750 Cross-Site Request Forgery (CSRF) vulnerability in Maeve Lander PayPal Responder allows Stored XSS.This issue affects PayPal Responder: from n/a thro… Mitigation only Fix from $1,9502024-12-01 HIGH 7.1 CVE-2024-53778 Cross-Site Request Forgery (CSRF) vulnerability in Essential Marketer Essential Breadcrumbs essential-breadcrumbs allows Stored XSS.This issue affect… Mitigation only Fix from $1,9502024-11-30 HIGH 7.1 CVE-2024-53736 Cross-Site Request Forgery (CSRF) vulnerability in Jason Grim Custom Shortcode Sidebars custom-shortcode-sidebars allows Stored XSS.This issue affect… Mitigation only Fix from $1,9502024-11-28 HIGH 7.1 CVE-2024-53734 Cross-Site Request Forgery (CSRF) vulnerability in Jamie O Idealien Category Enhancements idealien-category-enhancements allows Stored XSS.This issue… Mitigation only Fix from $1,9502024-11-28 HIGH 7.1 CVE-2024-53732 Cross-Site Request Forgery (CSRF) vulnerability in wpwox Footer Flyout Widget footer-flyout-widget allows Stored XSS.This issue affects Footer Flyout… Mitigation only Fix from $1,9502024-11-28 MEDIUM 6.1 CVE-2024-11342 The Skt NURCaptcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.0. This is due to missi… Mitigation only Fix from $1,6002024-11-26 HIGH 8.8 CVE-2024-11415 The WP-Orphanage Extended plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to … Mitigation only Fix from $1,9502024-11-23 MEDIUM 6.5 CVE-2024-9665 Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… Zimbra 9.0.0 / 10.0.10+ Fix from $1,6002024-11-22 HIGH 8.1 CVE-2024-11601 The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blog, Video Gallery… Sky Addons For Elementor 2.6.2+ Fix from $1,9502024-11-22 MEDIUM 6.1 CVE-2024-11416 The WIP Incoming Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to mi… Mitigation only Fix from $1,6002024-11-21 MEDIUM 6.1 CVE-2024-10726 The Friendly Functions for Welcart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.4. This… Mitigation only Fix from $1,6002024-11-21