Browse CVEs

MEDIUM 5.3 CVE-2024-1178 The SportsPress – Sports Club & League Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch… Sportspress 2.7.18+ Fix from $1,6002024-03-05 MEDIUM 6.5 CVE-2024-1285 The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a … Page Builder Sandwich after 5.1.0 Fix from $1,6002024-03-05 MEDIUM 6.5 CVE-2024-1381 The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi… Page Builder Sandwich after 5.1.0 Fix from $1,6002024-03-05 MEDIUM 5.3 CVE-2024-1093 The Change Memory Limit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_logic(… Change Memory Limit Mitigation only Fix from $1,6002024-03-05 MEDIUM 6.7 CVE-2024-20032 In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System executi… Android Mitigation only Fix from $1,6002024-03-04 MEDIUM 5.3 CVE-2024-1120 The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugins for WordPress are vulne… Finale 2.18.0 / 2.18.1+ Fix from $1,6002024-03-01 HIGH 8.8 CVE-2024-27950 Missing Authorization vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0. Sirv 7.2.1+ Fix from $1,9502024-03-01 MEDIUM 5.9 CVE-2024-27906 Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not hav… Airflow 2.8.2+ Fix from $1,6002024-02-29 MEDIUM 6.5 CVE-2024-23493 Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a … Mattermost Server 8.1.9 / 9.2.5+ Fix from $1,6002024-02-29 CRITICAL 9.1 CVE-2024-1982 The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the get_resto… Migration\, Backup\, Staging after 0.9.68 Fix from $2,3002024-02-29 HIGH 8.8 CVE-2023-47874 Missing Authorization vulnerability in Perfmatters.This issue affects Perfmatters: from n/a through 2.1.6. Perfmatters 2.1.7+ Fix from $1,9502024-02-29 MEDIUM 5.3 CVE-2024-1492 The WPify Woo Czech plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the maybe_send_to_packeta … Woo Czech 4.0.9+ Fix from $1,6002024-02-29 MEDIUM 5.3 CVE-2024-1389 The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthoriz… Membership \& Content Restriction Paid Member Subscriptions 2.11.2+ Fix from $1,6002024-02-29 MEDIUM 5.4 CVE-2024-1340 The Login Lockdown – Protect Login Form plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ge… Wp Login Lockdown 2.09+ Fix from $1,6002024-02-29 MEDIUM 6.5 CVE-2024-1318 The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized m… Rss Aggregator By Feedzy after 4.4.2 Fix from $1,6002024-02-29 MEDIUM 5.3 CVE-2024-1322 The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized modification of… Directorist 7.8.5+ Fix from $1,6002024-02-29 MEDIUM 5.4 CVE-2024-1218 The Contact Form builder with drag & drop for WordPress – Kali Forms plugin for WordPress is vulnerable to unauthorized access and modification of da… Contact Form Builder 2.3.41+ Fix from $1,6002024-02-29 MEDIUM 6.5 CVE-2024-1043 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'a… Accelerated Mobile Pages 1.0.93.2+ Fix from $1,6002024-02-29 MEDIUM 5.3 CVE-2024-1044 The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the… Customer Reviews For Woocommerce 5.39.0+ Fix from $1,6002024-02-29 HIGH 7.3 CVE-2024-0702 The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on seve… Oliver Pos 2.4.2.1+ Fix from $1,9502024-02-29 MEDIUM 5.3 CVE-2024-0516 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to unauthorized post metadata update due to a missing capability check on… Royal Elementor Addons 1.3.88+ Fix from $1,6002024-02-29 MEDIUM 5.3 CVE-2024-1860 The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized mod… Anti Hacker 4.52+ Fix from $1,6002024-02-28 MEDIUM 5.3 CVE-2024-1516 The WP eCommerce plugin for WordPress is vulnerable to unauthorized arbitrary post creation due to a missing capability check on the check_for_saas_p… Wp Ecommerce after 3.15.1 Fix from $1,6002024-02-28 MEDIUM 6.5 CVE-2024-1566 The Redirects plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save function in all v… Redirects after 1.2.1 Fix from $1,6002024-02-28 MEDIUM 5.3 CVE-2024-1136 The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to an improperly implemented URL check … Coming Soon Page \& Maintenance Mode 2.2.2+ Fix from $1,6002024-02-28 MEDIUM 5.3 CVE-2024-1368 The Page Duplicator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the duplicate_dat_pa… Page Duplicator after 0.1.1 Fix from $1,6002024-02-28 MEDIUM 5.4 CVE-2024-1687 The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized execution of shortcodes due to… Woocommerce Thank You Page Customizer after 1.1.3 Fix from $1,6002024-02-27 HIGH 8.8 CVE-2024-1710 The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the onAjaxAction function ac… Addon Library after 1.3.76 Fix from $1,9502024-02-26 MEDIUM 5.3 CVE-2024-1779 The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch… Admin Side Data Storage For Contact Form 7 after 1.1.1 Fix from $1,6002024-02-23 MEDIUM 5.3 CVE-2024-1778 The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch… Admin Side Data Storage For Contact Form 7 after 1.1.1 Fix from $1,6002024-02-23