Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wheel Of Life CRITICAL 9.8
CVE-2024-47311

Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Lev…

Fix: 1.1.9+
Fix from $2,300 2024-11-01
Mega Elements MEDIUM 5.4
CVE-2024-49693

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kraft Plugins Mega Elements mega-elements-addon…

Fix: 1.2.7+
Fix from $1,600 2024-10-24
Demo Importer Plus MEDIUM 5.4
CVE-2024-9172

The Demo Importer Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2…

Fix: 2.0.2+
Fix from $1,600 2024-10-02
Mega Elements MEDIUM 5.4
CVE-2024-37466

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kraftplugins Mega Elements.This issue af…

Fix: 1.2.3+
Fix from $1,600 2024-07-21
Wheel Of Life MEDIUM 5.4
CVE-2024-3627

The Wheel of Life: Coaching and Assessment Tool for Life Coach plugin for WordPress is vulnerable to unauthorized modification and loss of data due t…

Fix: after 1.1.7
Fix from $1,600 2024-06-20
Mega Elements MEDIUM 5.4
CVE-2024-4702

The Mega Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and includi…

Fix: 1.2.2+
Fix from $1,600 2024-05-15
Mega Elements MEDIUM 5.4
CVE-2024-32575

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kraftplugins Mega Elements allows Stored XSS.Th…

Fix: 1.2.0+
Fix from $1,600 2024-04-18