Website Security
LearnPress – WordPress LMS Plugin Vulnerability – Basic Information Disclosure via JSON API – CVE-2024-5483 | WordPress Plugin Vulnerability Report
Plugin Name: LearnPress – WordPress LMS Plugin Key Information: Software Type: Plugin Software Slug: learnpress Software Status: Active Software Author: thimpress Software Downloads: 4,325,110 Active Installs: 90,000 Last Updated: June 18, 2024 Patched Versions: 4.2.6.8.1 Affected Versions: <= 4.2.6.8 Vulnerability Details: Name: LearnPress – WordPress LMS Plugin <= 4.2.6.8 Title: Basic Information Disclosure via JSON…
Brizy – Page Builder Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes and Widget Link To URL – CVE-2024-1161, CVE-2024-3667, CVE-2024-2087, CVE-2024-1164 | WordPress Plugin Vulnerability Report
Plugin Name: Brizy – Page Builder Key Information: Software Type: Plugin Software Slug: brizy Software Status: Active Software Author: themefusecom Software Downloads: 4,689,320 Active Installs: 80,000 Last Updated: June 18, 2024 Patched Versions: 2.4.44 Affected Versions: <= 2.4.43 Vulnerability Details: Vulnerability 1: Name: Brizy – Page Builder <= 2.4.43 Title: Authenticated (Contributor+) Stored Cross-Site Scripting…
EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget – CVE-2024-5571 | WordPress Plugin Vulnerability Report
Plugin Name: EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor Key Information: Software Type: Plugin Software Slug: embedpress Software Status: Active Software Author: wpdevteam Software Downloads: 2,721,459 Active Installs: 90,000 Last Updated: June 18, 2024 Patched Versions:4.0.2 Affected Versions: <= 4.0.1 Vulnerability…
Newsletter Vulnerability – Unauthenticated Stored Cross-Site Scripting via np1 – CVE-2024-5317 | WordPress Plugin Vulnerability Report
Plugin Name: Newsletter – Send awesome emails from WordPress Key Information: Software Type: Plugin Software Slug: newsletter Software Status: Active Software Author: satollo Software Downloads: 25,847,810 Active Installs: 300,000 Last Updated: June 18, 2024 Patched Versions: 8.3.5 Affected Versions: <= 8.3.4 Vulnerability Details: Name: Newsletter <= 8.3.4 Title: Unauthenticated Stored Cross-Site Scripting via np1 Type:…
Email Subscribers by Icegram Express Vulnerability – Unauthenticated SQL Injection via hash – CVE-2024-4295 | WordPress Plugin Vulnerability Report
Plugin Name: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce Key Information: Software Type: Plugin Software Slug: email-subscribers Software Status: Active Software Author: icegram Software Downloads: 10,659,578 Active Installs: 90,000 Last Updated: June 18, 2024 Patched Versions: 5.7.21 Affected Versions: <= 5.7.20 Vulnerability Details: Name: Email Subscribers by Icegram…
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formerly Sendinblue) Vulnerability – Reflected Cross-Site Scripting – CVE-2024-35668 | WordPress Plugin Vulnerability Report
Plugin Name: Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formerly Sendinblue) Key Information: Software Type: Plugin Software Slug: mailin Software Status: Active Software Author: neeraj_slit Software Downloads: 4,539,519 Active Installs: 100,000 Last Updated: June 12, 2024 Patched Versions: 3.1.78 Affected Versions: <= 3.1.77 Vulnerability Details: Name: Newsletter, SMTP, Email marketing and Subscribe forms…
wpDataTables Vulnerability – Missing Authorization to DataTable Access & Modification – CVE-2024-3821 | WordPress Plugin Vulnerability Report
Plugin Name: wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin Key Information: Software Type: Plugin Software Slug: wpdatatables Software Status: Active Software Author: wpdatatables Software Downloads: 1,479,590 Active Installs: 70,000 Last Updated: June 12, 2024 Patched Versions: 6.4 Affected Versions: <= 6.3.2 Vulnerability Details: Name: wpDataTables – Tables & Table Charts (Premium)…
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting – CVE-2024-5501 | WordPress Plugin Vulnerability Report
Plugin Name: Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder Key Information: Software Type: Plugin Software Slug: supreme-modules-for-divi Software Status: Active Software Author: divisupreme Software Downloads: 2,590,021 Active Installs: 200,000 Last Updated: June 12, 2024 Patched Versions: 2.5.52 Affected Versions: <= 2.5.51 Vulnerability Details: Name: Supreme Modules Lite – Divi Theme, Extra…
Master Slider – Responsive Touch Slider Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting – CVE-2023-6382 | WordPress Plugin Vulnerability Report
Plugin Name: Master Slider – Responsive Touch Slider Key Information: Software Type: Plugin Software Slug: master-slider Software Status: Active Software Author: averta Software Downloads: 2,830,772 Active Installs: 90,000 Last Updated: June 12, 2024 Patched Versions: 3.9.10 Affected Versions: <= 3.9.9 Vulnerability Details: Name: Master Slider – Responsive Touch Slider <= 3.9.9 Title: Authenticated (Contributor+) Stored…
Page Builder Gutenberg Blocks – CoBlocks Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles – CVE-2024-2933 | WordPress Plugin Vulnerability Report
Plugin Name: Page Builder Gutenberg Blocks – CoBlocks Key Information: Software Type: Plugin Software Slug: coblocks Software Status: Active Software Author: GoDaddy Software Downloads: 21,200,695 Active Installs: 400,000 Last Updated: June 12, 2024 Patched Versions: 3.1.10 Affected Versions: <= 3.1.9 Vulnerability Details: Name: Page Builder Gutenberg Blocks – CoBlocks <= 3.1.9 Title: Authenticated (Contributor+) Stored…