Browse CVEs

MEDIUM 5.4 CVE-2024-12813 The Open Hours – Easy Opening Hours plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'open-hours-current-status' s… Open Hours after 1.0.9 Fix from $1,6002025-02-18 MEDIUM 5.4 CVE-2024-8241 The Nova Blocks by Pixelgrade plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute of the 'wp:separator' Guten… Nova Blocks 2.1.8+ Fix from $1,6002024-09-10 HIGH 8.8 CVE-2023-27633 Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Customify – Intuitive Website Styling plugin <= 2.10.4 versions. Customify after 2.10.4 Fix from $1,9502023-11-22 HIGH 8.8 CVE-2023-45654 Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions. Comments Rating after 1.1.7 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45655 Cross-Site Request Forgery (CSRF) vulnerability in PixelGrade PixFields plugin <= 0.7.0 versions. Pixfields after 0.7.0 Fix from $1,9502023-10-16 MEDIUM 6.1 CVE-2023-40205 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Pixelgrade PixTypes plugin <= 1.4.15 versions. Pixtypes after 1.4.15 Fix from $1,6002023-09-04 HIGH 8.8 CVE-2023-23704 Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.6 versions. Comments Rating 1.1.7+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-25487 Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade PixTypes plugin <= 1.4.14 versions. Pixtypes 1.4.15+ Fix from $1,9502023-07-11 MEDIUM 5.4 CVE-2022-46844 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PixelGrade PixFields plugin <= 0.7.0 versions. Pixfields after 0.7.0 Fix from $1,6002023-05-09 MEDIUM 5.4 CVE-2022-4671 The PixCodes WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, whi… Pixcodes 2.3.7+ Fix from $1,6002023-01-30