Browse CVEs

MEDIUM 5.4 CVE-2024-9663 The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin… Cyan Backup 2.5.3+ Fix from $1,6002025-05-15 MEDIUM 5.4 CVE-2024-9662 The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin… Cyan Backup 2.5.3+ Fix from $1,6002025-05-15 MEDIUM 5.4 CVE-2024-10151 The Auto iFrame WordPress plugin before 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post … Auto Iframe 2.0+ Fix from $1,6002025-01-08 HIGH 7.1 CVE-2024-5151 The SULly WordPress plugin before 4.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to pe… Sully 4.3.1+ Fix from $1,9502024-07-13 HIGH 8.8 CVE-2024-5034 The SULly WordPress plugin before 4.3.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwante… Sully 4.3.1+ Fix from $1,9502024-07-13 MEDIUM 5.9 CVE-2024-5033 The SULly WordPress plugin before 4.3.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow a… Sully 4.3.1+ Fix from $1,6002024-07-13 HIGH 8.8 CVE-2023-40556 Cross-Site Request Forgery (CSRF) vulnerability in Greg Ross Schedule Posts Calendar plugin <= 5.2 versions. Schedule Posts Calendar after 5.2 Fix from $1,9502023-10-06