CVE Vulnerability Catalog

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height_slider' Slider Module Field in all versions up to and including 7.7.6 due to insufficient input sanitization and output escaping.

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'b_width_map' field in the Map Module in all versions up to and including 7.7.6 due to insufficient input sanitization and output escaping.

The Solace Extra plugin for WordPress up to version 1.5.3 is vulnerable to authorization bypass. Unauthenticated attackers can permanently delete all content previously imported via the Starter Template feature, including posts, pages, media, WooCommerce products, taxonomy terms, and templates. The required nonce is exposed on every admin page, and the handler is also registered for unauthenticated users.

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress up to version 5.14.0 is vulnerable to Insecure Direct Object Reference (IDOR) in the generate_document_shortcode. Missing validation on a user-controlled key allows authenticated attackers with contributor-level access or higher to generate publicly accessible download links for arbitrary third-party orders, exposing sensitive customer data.

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_tooltip_text' parameter in versions up to and including 4.11.84 due to insufficient input sanitization and output escaping. This allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts that execute when an administrator opens the affected post in the Elementor editor.

The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in the [starboard-suite-lightbox] shortcode in all versions up to and including 3.1.4 due to insufficient input sanitization and output escaping.

The MyParcel plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 4.25.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers with subscriber-level access and above to view and modify shipment options on any arbitrary order.

The Mux Video Uploader plugin for WordPress up to version 1.1.4 is vulnerable to sensitive information exposure via the muxvideo_enqueue_settings_script. This allows authenticated attackers with subscriber-level access or higher to extract sensitive data, including Mux API credentials.

The SimpLy Gallery Block & Lightbox plugin for WordPress is vulnerable to stored XSS via block attributes due to insufficient input sanitization and output escaping. The pgc_sgb_sanitize_custom_css() function uses a flawed regex that fails to catch unquoted event handlers, allowing authenticated attackers with Author-level access to inject arbitrary scripts.

The Lockme OAuth2 calendars integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'App ID' setting in versions up to and including 2.11.0. Insufficient input sanitization and output escaping allow unsanitized data to be stored and echoed without proper encoding on the settings page. Authenticated attackers with administrator-level access can inject arbitrary scripts that execute whenever the plugin settings page is accessed.

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to and including 4.5.0 due to insufficient escaping and lack of proper SQL query preparation. This allows authenticated attackers with Doctor-level access or higher to append additional SQL queries, potentially extracting sensitive database information.

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL injection via the 'orderby' parameter in versions up to and including 4.5.0. This is due to insufficient escaping and lack of proper SQL query preparation.

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin for WordPress is vulnerable to generic SQL injection via the 'val' parameter in versions up to and including 1.1.9 due to insufficient escaping and lack of query preparation. This allows unauthenticated attackers to append additional SQL queries, potentially extracting sensitive database information.

The Members – Membership & User Role Editor Plugin for WordPress up to version 3.2.22 is vulnerable to sensitive information exposure via the members_filter_protected_posts_for_rest function. Unauthenticated attackers can determine the existence and exact count of access-restricted posts, and use pagination as a boolean oracle to infer keywords and content from hidden restricted posts.

The Points and Rewards for WooCommerce plugin for WordPress up to version 2.10.0 has an authorization bypass vulnerability. Authenticated attackers with subscriber-level access can convert and drain any user's reward points, exfiltrate data to an external Klaviyo account, overwrite the Klaviyo API key, and block/unblock users in the points system. Additionally, unauthenticated visitors can obtain a valid nonce and exploit a specific action.

The UnderConstructionPage PRO plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to and including 5.76. This is due to the plugin accepting arbitrary local file paths in the template_thumbnail parameter and copying their contents into a publicly accessible uploads file.

The Clean RESTful module for Drupal contains an unspecified vulnerability. This issue affects all versions of the module.

The Raw Formatter [Meta Tag Formatter] plugin for Drupal contains an unspecified vulnerability. The issue affects all versions of this extension.

A vulnerability has been detected in the Drupal Brute force attack protection module. The issue affects all versions of this module.

A vulnerability in Drupal Composer allows an unspecified threat. This issue affects all versions of Composer.