Browse CVEs

MEDIUM 6.1 CVE-2024-6690 The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the referrer parameter, allowing redirection of users to external sites Wp Content Copy Protection \& No Right Click 15.3+ Fix from $1,6002025-05-15 HIGH 8.8 CVE-2024-49306 Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Req… Wp Content Copy Protection \& No Right Click 3.6.1+ Fix from $1,9502024-10-20 CRITICAL 9.8 CVE-2022-4305EPSS 39% The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to log in as another one, which… Login As User Or Customer \(user Switching\) 3.3+ Fix from $2,3002023-01-23 HIGH 8.8 CVE-2022-23983 Cross-Site Request Forgery (CSRF) vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress… Wp Content Copy Protection \& No Right Click after 3.4.4 Fix from $1,9502022-02-21 HIGH 8.8 CVE-2021-24847 The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticate… Seo Redirection 301 Redirect Manager 8.2+ Fix from $1,9502021-11-17 HIGH 8.8 CVE-2021-24829 The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX a… Visitor Traffic Real Time Statistics 3.9+ Fix from $1,9502021-11-08 HIGH 8.8 CVE-2021-24193 Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time Statistics WordPress plugin b… Visitor Traffic Real Time Statistics 2.12+ Fix from $1,9502021-05-14 HIGH 8.8 CVE-2021-24194 Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login Protection - Limit Failed Login Attempts WordPres… Login Protection Limit Failed Login Attempts 2.9+ Fix from $1,9502021-05-14 HIGH 8.8 CVE-2021-24195 Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login as User or Customer (User Switching) WordPress pl… Login As User Or Customer \(user Switching\) 1.8+ Fix from $1,9502021-05-14 HIGH 8.8 CVE-2021-24188 Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection & No Right Click WordPress p… Wp Content Copy Protection \& No Right Click 3.1.5+ Fix from $1,9502021-05-14 HIGH 8.8 CVE-2021-24189 Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Captchinoo, Google recaptcha for admin login page WordP… Captchinoo 2.4+ Fix from $1,9502021-05-14 HIGH 8.8 CVE-2021-24190 Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WooCommerce Conditional Marketing Mailer WordPress plug… Conditional Marketing Mailer 1.5.2+ Fix from $1,9502021-05-14 HIGH 8.8 CVE-2019-15831 The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page. Visitor Traffic Real Time Statistics 1.12+ Fix from $1,9502019-08-30 HIGH 8.8 CVE-2019-15832 The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF. Visitor Traffic Real Time Statistics 1.13+ Fix from $1,9502019-08-30