Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Open Hours MEDIUM 5.4
CVE-2024-12813

The Open Hours – Easy Opening Hours plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'open-hours-current-status' s…

Fix: after 1.0.9
Fix from $1,600 2025-02-18
Nova Blocks MEDIUM 5.4
CVE-2024-8241

The Nova Blocks by Pixelgrade plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute of the 'wp:separator' Guten…

Fix: 2.1.8+
Fix from $1,600 2024-09-10
Customify HIGH 8.8
CVE-2023-27633

Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Customify – Intuitive Website Styling plugin <= 2.10.4 versions.

Fix: after 2.10.4
Fix from $1,950 2023-11-22
Comments Rating HIGH 8.8
CVE-2023-45654

Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions.

Fix: after 1.1.7
Fix from $1,950 2023-10-16
Pixfields HIGH 8.8
CVE-2023-45655

Cross-Site Request Forgery (CSRF) vulnerability in PixelGrade PixFields plugin <= 0.7.0 versions.

Fix: after 0.7.0
Fix from $1,950 2023-10-16
Pixtypes MEDIUM 6.1
CVE-2023-40205

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Pixelgrade PixTypes plugin <= 1.4.15 versions.

Fix: after 1.4.15
Fix from $1,600 2023-09-04
Comments Rating HIGH 8.8
CVE-2023-23704

Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.6 versions.

Fix: 1.1.7+
Fix from $1,950 2023-07-11
Pixtypes HIGH 8.8
CVE-2023-25487

Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade PixTypes plugin <= 1.4.14 versions.

Fix: 1.4.15+
Fix from $1,950 2023-07-11
Pixfields MEDIUM 5.4
CVE-2022-46844

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PixelGrade PixFields plugin <= 0.7.0 versions.

Fix: after 0.7.0
Fix from $1,600 2023-05-09
Pixcodes MEDIUM 5.4
CVE-2022-4671

The PixCodes WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, whi…

Fix: 2.3.7+
Fix from $1,600 2023-01-30