CVE Vulnerability Catalog

The Booking Manager plugin (by wpdevelop) is vulnerable to Stored Cross-site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects Booking Manager versions from n/a through <= 2.1.17.

Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor (wpkoi-templates-for-elementor) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WPKoi Templates for Elementor: from n/a through <= 3.4.4.

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes WP Plugin Manager allows CSRF attacks. Affects versions up to and including 1.4.7.

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WooCommerce PDF Invoice Builder: from n/a through <= 1.2.150.

The WooCommerce Ultimate Points And Rewards plugin (versions up to 2.10.2) exposes sensitive system information to an unauthorized control sphere, allowing retrieval of embedded sensitive data. This may lead to system information leakage.

The Frontend File Manager plugin for WordPress (nmedia-user-file-uploader) contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects versions from n/a through 23.2.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS. This issue affects Popup addon for Ninja Forms: from n/a through <= 3.5.1.

The WP Content Pilot plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. The issue affects versions up to and including 2.1.7.

The WordPress plugin Auto Prune Posts in versions up to and including 3.0.0 is vulnerable to Cross-Site Request Forgery (CSRF). Missing proper request validation allows an attacker to trick an administrator into performing unauthorized actions.

The Appointment Booking Calendar plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. The issue affects versions up to and including 1.3.95.

The Theater for WordPress plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. The issue affects versions up to and including 0.18.8.

The Save as PDF Button plugin for WordPress (all versions up to and including 1.9.2) is vulnerable to Stored Cross-Site Scripting via the restpackpdfbutton shortcode. This is due to insufficient input sanitization and output escaping on user-supplied attributes.

The Convert WebP & AVIF | Quicq | Best image optimizer and compression plugin | Improve your Google Pagespeed plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'wp_ajax_wpqai_disconnect_quicq_afosto' AJAX endpoint in all versions up to and including 2.0.0. This allows authenticated attackers with Subscriber-level access and above to disconnect Afosto.

The WordPress Content Flipper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bgcolor' shortcode attribute of the 'flipper_front' shortcode in all versions up to and including 0.1. This is due to insufficient input sanitization and output escaping, allowing authenticated attackers with contributor-level access and above to inject arbitrary web scripts.

The WP Headless CMS Framework plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to and including 1.15. The plugin only checks for the presence of the Authorization header, allowing unauthenticated attackers to access content they should not access.

The Angel – Fashion Model Agency WordPress CMS Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the profile media uploader in all versions up to, and including, 3.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the user has access to the edit profile form with the media upload option.

Wtyczka AI Engine dla WordPressa jest podatna na wstrzyknięcie obiektów PHP poprzez deserializację PHAR w wersjach do 3.1.8 włącznie. Problem występuje w funkcjach 'rest_simpleTranscribeAudio' i 'rest_simpleVisionQuery', co umożliwia uwierzytelnionym atakującym z dostępem na poziomie Subskrybenta i wyżej wstrzyknięcie obiektu PHP.

The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 3.1.0 via the 'ajax_get_comment' function. This allows unauthenticated attackers to extract sensitive data including user IDs, IP addresses, and email addresses.

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress (all versions up to and including 6.0.7) is vulnerable to generic SQL Injection via the 'filterbyauthor' parameter due to insufficient escaping and lack of preparation on the existing SQL query. An authenticated attacker with Administrator-level access and above can append additional SQL queries to extract sensitive information from the database.

The WordPress plugin Survey Maker is vulnerable to unauthorized access of data due to a missing capability check on the 'ays_survey_show_results' AJAX endpoint in all versions up to and including 5.1.9.4. This allows unauthenticated attackers to view all survey submissions.