Browse CVEs

MEDIUM 5.3 CVE-2024-0970 This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attac… User Activity Tracking And Log 4.1.4+ Fix from $1,6002025-05-15 CRITICAL 9.8 CVE-2023-4521EPSS 39% The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor… Import Xml And Rss Feeds 2.1.5+ Fix from $2,3002023-09-25 HIGH 7.2 CVE-2023-4300 The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malic… Import Xml And Rss Feeds 2.1.4+ Fix from $1,9502023-09-25 MEDIUM 6.5 CVE-2023-4013 The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its license, w… Gdpr Cookie Compliance 4.12.5+ Fix from $1,6002023-08-30 CRITICAL 9.1 CVE-2020-24148EPSS 15% Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the data parameter in a moove_rea… Import Xml And Rss Feeds Mitigation only Fix from $2,3002021-07-07 MEDIUM 6.1 CVE-2021-24286EPSS 14% The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, … Redirect 404 To Parent 1.3.1+ Fix from $1,6002021-05-14 MEDIUM 6.1 CVE-2021-24287EPSS 10% The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly saniti… Select All Categories And Taxonomies\, Change Checkbox To Radio Buttons 1.3.2+ Fix from $1,6002021-05-14 MEDIUM 5.4 CVE-2021-24247 The Contact Form Check Tester WordPress plugin through 1.0.2 settings are visible to all registered users in the dashboard and are lacking any saniti… Contact Form Check Tester after 1.0.2 Fix from $1,6002021-05-06