WooCommerce Vulnerability – Reflected Cross-Site Scripting via Order Attribution – CVE-2024-37297 | WordPress Plugin Vulnerability Report
Plugin Name: WooCommerce Key Information: Software Type: Plugin Software Slug: woocommerce Software Status: Active Software Author: woothemes Software Downloads: 317,169,418 Active Installs: 7,000,000 Last Updated: June 20, 2024 Patched Versions: 8.8.5, 8.9.3 Affected Versions: 8.8.0 – 8.8.4, 8.9.0 – 8.9.2 Vulnerability Details: Name: WooCommerce 8.8.0 – 8.9.2 Title: Reflected Cross-Site Scripting via Order Attribution Type:…
Read MoreEssential Addons for Elementor Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting – CVE-2024-5189 | WordPress Plugin Vulnerability Report
Plugin Name: Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders Key Information: Software Type: Plugin Software Slug: essential-addons-for-elementor-lite Software Status: Active Software Author: wpdevteam Software Downloads: 76,299,572 Active Installs: 2,000,000 Last Updated: July 2, 2024 Patched Versions: 5.9.24 Affected Versions: <= 5.9.23 Vulnerability Details: Name: Essential Addons for Elementor –…
Read MoreWP Reset – Most Advanced WordPress Reset Tool Vulnerability – Missing Authorization to License Key Modification – CVE-2024-4661 | WordPress Plugin Vulnerability Report
Plugin Name: WP Reset – Most Advanced WordPress Reset Tool Key Information: Software Type: Plugin Software Slug: wp-reset Software Status: Active Software Author: webfactory Software Downloads: 7,859,387 Active Installs: 300,000 Last Updated: June 20, 2024 Patched Versions: 2.03 Affected Versions: <= 2.01 Vulnerability Details: Name: WP Reset <= 2.02 Title: Missing Authorization to License Key…
Read MoreWP Force SSL & HTTPS SSL Redirect Vulnerability – Missing Authorization to Settings Update – CVE-2024-5770 | WordPress Plugin Vulnerability Report
Plugin Name: WP Force SSL & HTTPS SSL Redirect Key Information: Software Type: Plugin Software Slug: wp-force-ssl Software Status: Active Software Author: webfactory Software Downloads: 1,473,630 Active Installs: 100,000 Last Updated: June 19, 2024 Patched Versions: 1.67 Affected Versions: <= 1.66 Vulnerability Details: Name: WP Force SSL & HTTPS SSL Redirect <= 1.66 Title: Missing…
Read MoreMinimal Coming Soon – Coming Soon Page Vulnerability – Missing Authorization to Limited Settings Change – CVE-2024-5087 | WordPress Plugin Vulnerability Report
Plugin Name: Minimal Coming Soon – Coming Soon Page Key Information: Software Type: Plugin Software Slug: minimal-coming-soon-maintenance-mode Software Status: Active Software Author: webfactory Software Downloads: 2,009,191 Active Installs: 100,000 Last Updated: June 19, 2024 Patched Versions: 2.39 Affected Versions: <= 2.38 Vulnerability Details: Name: Minimal Coming Soon – Coming Soon Page <= 2.38 Title: Missing…
Read MoreTablePress – Tables in WordPress made easy Vulnerability – Authenticated (Author+) Server-Side Request Forgery via DNS Rebind – CVE-2024-4354 | WordPress Plugin Vulnerability Report
Plugin Name: TablePress – Tables in WordPress made easy Key Information: Software Type: Plugin Software Slug: tablepress Software Status: Active Software Author: tobiasbg Software Downloads: 15,366,391 Active Installs: 800,000 Last Updated: June 18, 2024 Patched Versions: 2.3.2 Affected Versions: <= 2.3.1 Vulnerability Details: Name: TablePress – Tables in WordPress made easy <= 2.3 Title: Authenticated…
Read MoreStrong Testimonials Vulnerability – Authenticated(Contributor+) Improper Authorization to Views Modification – CVE-2023-6491 | WordPress Plugin Vulnerability Report
Plugin Name: Strong Testimonials Key Information: Software Type: Plugin Software Slug: strong-testimonials Software Status: Active Software Author: wpchill Software Downloads: 3,337,363 Active Installs: 100,000 Last Updated: June 18, 2024 Patched Versions: 3.1.13 Affected Versions: <= 3.1.12 Vulnerability Details: Name: Strong Testimonials <= 3.1.12 Title: Authenticated(Contributor+) Improper Authorization to Views Modification Type: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE: CVE-2023-6491 CVSS…
Read MoreRoyal Elementor Addons and Templates Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting, Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads – CVE-2024-4488, CVE-2024-4489 | WordPress Plugin Vulnerability Report
Plugin Name: Royal Elementor Addons and Templates Key Information: Software Type: Plugin Software Slug: royal-elementor-addons Software Status: Active Software Author: wproyal Software Downloads: 5,750,699 Active Installs: 300,000 Last Updated: June 19, 2024 Patched Versions: 1.3.977 Affected Versions: <= 1.3.976 Vulnerability 1 Details: Name: Royal Elementor Addons and Templates <= 1.3.976 Title: Authenticated (Contributor+) Stored Cross-Site…
Read MoreFileOrganizer Vulnerability – Sensitive Information Exposure via Directory Listing – CVE-2024-5599 | WordPress Plugin Vulnerability Report
Plugin Name: FileOrganizer – Manage WordPress and Website Files Key Information: Software Type: Plugin Software Slug: fileorganizer Software Status: Active Software Author: softaculous Software Downloads: 747,926 Active Installs: 100,000 Last Updated: June 20, 2024 Patched Versions: 1.0.8 Affected Versions: <= 1.0.7 Vulnerability Details: Name: FileOrganizer <= 1.0.7 Title: Sensitive Information Exposure via Directory Listing Type:…
Read More