Browse CVEs

MEDIUM 5.3 CVE-2024-33939 Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Mas… Masteriyo 1.7.4+ Fix from $1,6002025-05-19 MEDIUM 6.1 CVE-2024-9218 The Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin for WordPress is vulnerab… Magazine Blocks 1.3.15+ Fix from $1,6002024-10-02 MEDIUM 6.1 CVE-2024-37432 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeGrill Esteem allows Stored XSS.This… Esteem 1.5.1+ Fix from $1,6002024-07-22 CRITICAL 9.8 CVE-2024-24882 Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a thr… Masteriyo 1.7.3+ Fix from $2,3002024-05-17 MEDIUM 5.3 CVE-2024-1462 The Maintenance Page plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 1.0.8 via the REST API. T… Maintenance Page 1.0.9+ Fix from $1,6002024-03-13 MEDIUM 6.5 CVE-2024-0679 The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in a… Colormag after 3.1.2 Fix from $1,6002024-01-20 MEDIUM 6.5 CVE-2023-3345 The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for a… Masteriyo 1.6.8+ Fix from $1,6002023-07-31 CRITICAL 9.1 CVE-2020-36333 themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook. Themegrill Demo Importer 1.6.2+ Fix from $2,3002021-05-05 HIGH 8.8 CVE-2020-36334 themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database. Themegrill Demo Importer 1.6.3+ Fix from $1,9502021-05-05