Tag: NVD
-
CVE-2024-1798 – The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized …
The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the …
-
CVE-2024-1804 – The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized …
The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check …
-
CVE-2024-4410 – The IgnitionDeck Crowdfunding Platform plugin for WordPress is vulnerable to Missing …
The IgnitionDeck Crowdfunding Platform plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.9.8. …
-
CVE-2024-6152 – The Flipbox Builder plugin for WordPress is vulnerable to PHP Object Injection in all …
The Flipbox Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5 via …
-
CVE-2024-6431 – The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads …
The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and missing …
-
CVE-2024-6545 – The Admin Trim Interface plugin for WordPress is vulnerable to Full Path Disclosure in …
The Admin Trim Interface plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.5.1. This is …
-
CVE-2024-6546 – The One Click Close Comments plugin for WordPress is vulnerable to Full Path Disclosure …
The One Click Close Comments plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.7.1. This …
-
CVE-2024-6547 – The Add Admin CSS plugin for WordPress is vulnerable to Full Path Disclosure in all …
The Add Admin CSS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to …
-
CVE-2024-6548 – The Add Admin JavaScript plugin for WordPress is vulnerable to Full Path Disclosure in …
The Add Admin JavaScript plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0. This is due …
-
CVE-2024-6549 – The Admin Post Navigation plugin for WordPress is vulnerable to Full Path Disclosure in …
The Admin Post Navigation plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.1. This is due …
-
CVE-2024-6566 – The Aramex Shipping WooCommerce plugin for WordPress is vulnerable to Full Path …
The Aramex Shipping WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.21. …
-
CVE-2024-6573 – The Intelligence plugin for WordPress is vulnerable to Full Path Disclosure in all …
The Intelligence plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.0. This is due the …
●●●