CVE-2021-24701

Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting

The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Quiz Tool Lite Project

Products

Quiz Tool Lite

CVE-2021-24700

Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting

The Forminator WordPress plugin before 1.15.4 does not sanitize and escape the email field label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Incsub

Products

Forminator

CVE-2021-24699

Easy Media Download < 1.1.7 - Contributor+ Stored Cross-Site Scripting

The Easy Media Download WordPress plugin before 1.1.7 does not escape the text argument of its shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Easy Media Download Project

Products

Easy Media Download

CVE-2021-24698

Simple Download Monitor < 3.9.6 - Arbitrary Thumbnails Removal

The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, even if they cannot normally edit the download.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Tipsandtricks-hq

Products

Simple Download Monitor

CVE-2021-24697

Simple Download Monitor < 3.9.5 - Reflected Cross-Site Scripting

The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the 1) sdm_active_tab GET parameter and 2) sdm_stats_start_date/sdm_stats_end_date POST parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Tipsandtricks-hq

Products

Simple Download Monitor

CVE-2021-24696

Simple Download Monitor < 3.9.9 - Multiple CSRF

The Simple Download Monitor WordPress plugin before 3.9.9 does not enforce nonce checks, which could allow attackers to perform CSRF attacks to 1) make admins export logs to exploit a separate log disclosure vulnerability (fixed in 3.9.6), 2) delete logs (fixed in 3.9.9), 3) remove thumbnail image from downloads

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Tipsandtricks-hq

Products

Simple Download Monitor

CVE-2021-24695

Simple Download Monitor < 3.9.6 - Unauthenticated Log Access

The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to download and read the logs containing Sensitive Information such as IP Addresses and Usernames

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Tipsandtricks-hq

Products

Simple Download Monitor

CVE-2021-24694

Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes

The Simple Download Monitor WordPress plugin before 3.9.11 could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attack via 1) "color" or "css_class" argument of sdm_download shortcode, 2) "class" or "placeholder" argument of sdm_search_form shortcode.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Tipsandtricks-hq

Products

Simple Download Monitor

CVE-2021-24693

Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail

The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the "File Thumbnail" post meta before outputting it in some pages, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. Given the that XSS is triggered even when the Download is in a review state, contributor could make JavaScript code execute in a context of a reviewer such as admin and make them create a rogue admin account, or install a malicious plugin

CVSS 3.1 · 9.0 Critical EPSS 1.3% KEV · Not listed

Vendors

Tipsandtricks-hq

Products

Simple Download Monitor

CVE-2021-24692

Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal

The Simple Download Monitor WordPress plugin before 3.9.5 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Tipsandtricks-hq

Products

Simple Download Monitor

CVE-2021-24691

Quiz And Survey Master < 7.3.2 - Admin+ Stored Cross-Site Scripting

The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it in some pages, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Expresstech

Products

Quiz And Survey Master

CVE-2021-24690

Chained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting

The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Kibokolabs

Products

Chained Quiz

CVE-2021-24689

Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File Read

The Contact Forms - Drag & Drop Contact Form Builder WordPress plugin through 1.0.5 allows high privilege users to download arbitrary files from the web server via a path traversal attack

CVSS 3.1 · 4.9 Medium EPSS 1.3% KEV · Not listed

Vendors

Wpeverest

Products

Contact Form

CVE-2021-24688

Orange Form <= 1.0.1 - Unauthenticated Arbitrary Post Deletion

The Orange Form WordPress plugin through 1.0.1 does not have any authorisation and CSRF checks in all of its AJAX calls, for example the or_delete_filed one which is available to both unauthenticated and authenticated users could allow attackers to delete arbitrary posts.The AJAX calls performing actions on posts also do not ensure that the post belong to them (or that they are allowed to perform such action on it)

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Orange-form Project

Products

Orange-form

CVE-2021-24687

Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scripting

The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Webnus

Products

Modern Events Calendar Lite

CVE-2021-24686

SVG Support < 2.3.20 - Admin+ Stored Cross-Site Scripting

The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Benbodhi

Products

Svg Support

CVE-2021-24685

Flat Preloader < 1.5.4 - CSRF to Stored Cross-Site Scripting

The Flat Preloader WordPress plugin before 1.5.4 does not enforce nonce checks when saving its settings, as well as does not sanitise and escape them, which could allow attackers to a make logged in admin change them with a Cross-Site Scripting payload (triggered either in the frontend or backend depending on the payload)

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Flat Preloader Project

Products

Flat Preloader

CVE-2021-24684

PDF Light Viewer < 1.4.12 - Authenticated Command Injection

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript.

CVSS 3.1 · 8.8 High EPSS 4.3% KEV · Not listed

Vendors

Teamlead

Products

Pdf-light-viewer

CVE-2021-24683

Weather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting

The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored Cross-Site Scripting issue.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Awplife

Products

Weather Effect

CVE-2021-24682

Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting

The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Wpkube

Products

Cool Tag Cloud