CVE-2021-24581

Blue Admin <= 21.06.01 - CSRF to Stored Cross-Site Scripting (XSS)

The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin does not have CSRF check in place when saving its settings, allowing the issue to be exploited via a CSRF attack.

CVSS 3.1 · 8.8 High EPSS 4.1% KEV · Not listed

Vendors

Blue-admin Project

Products

Blue-admin

CVE-2021-24580

Side Menu Lite < 2.2.6 - Authenticated SQL Injection

The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Wow-estore

Products

Side Menu

CVE-2021-24579

Bold Page Builder < 3.1.6 - PHP Object Injection

The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unserialize() function without any validation or sanitisation, which could lead to a PHP Object Injection. Even though the plugin did not contain a suitable gadget to fully exploit the issue, other installed plugins on the blog could allow such issue to be exploited and lead to RCE in some cases.

CVSS 3.1 · 8.8 High EPSS 8.2% KEV · Not listed

Vendors

Bold-themes

Products

Bold Page Builder

CVE-2021-24578

SportsPress < 2.7.9 - Reflected Cross-Site Scripting

The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its match_day parameter before outputting back in the Events backend page, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Themeboy

Products

Sportspress

CVE-2021-24577

Coming Soon and Maintenance Mode < 3.5.3 - Authenticated Stored XSS

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Wpdevart

Products

Coming Soon And Maintenance Mode

CVE-2021-24576

Easy Accordion < 2.0.22 - Authenticated Stored XSS

The Easy Accordion WordPress plugin before 2.0.22 does not properly sanitize inputs when adding new items to an accordion.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Techearty

Products

Easy Accordion

CVE-2021-24575

WPSchoolPress < 2.1.10 - Multiple Authenticated SQL Injections

The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before using POST variable in SQL queries, leading to SQL injection in multiple actions available to various authenticated users, from simple subscribers/students to teachers and above.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Igexsolutions

Products

Wpschoolpress

CVE-2021-24574

Simple Banner < 2.10.4 - Authenticated Stored XSS

The Simple Banner WordPress plugin before 2.10.4 does not sanitise and escape one of its settings, allowing high privilege users such as admin to use Cross-Site Scripting payload even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Simple Banner Project

Products

Simple Banner

CVE-2021-24572

Paypal Donation < 1.3.1 - CSRF to Arbitrary Post Deletion

The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletion of a button is not CSRF protected and there is no control to check if the deleted post was a button post. As a result, an attacker could make logged in admins delete arbitrary posts

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Wpplugin

Products

Accept Donations With Paypal

CVE-2021-24571

HD Quiz < 1.8.4 - Authenticated Stored XSS

The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Harmonicdesign

Products

Hd Quiz

CVE-2021-24570

Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site Scripting

The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which internally are posts. The process to create a new button is lacking a CSRF check. An attacker could use this to make an authenticated admin create a new button. Furthermore, one of the Button field is not escaped before being output in an attribute when editing a Button, leading to a Stored Cross-Site Scripting issue as well.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Wpplugin

Products

Accept Donations With Paypal

CVE-2021-24569

Cookie Notice & Compliance for GDPR / CCPA < 2.1.2 - Admin+ Stored Cross-Site Scripting

The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.1.2 does not escape the value of its Button Text setting when outputting it in an attribute in the frontend, allowing high privilege users such as admin to perform Cross-Site Scripting even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Hu-manity

Products

Cookie Notice \& Compliance For Gdpr \/ Ccpa

CVE-2021-24568

AddToAny < 1.7.46 - Authenticated Stored XSS

The AddToAny Share Buttons WordPress plugin before 1.7.46 does not sanitise its Sharing Header setting when outputting it in frontend pages, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Addtoany

Products

Addtoany Share Buttons

CVE-2021-24567

Simple Post <= 1.1 - Authenticated Stored Cross-Site Scripting (XSS)

The Simple Post WordPress plugin through 1.1 does not sanitize user input when an authenticated user Text value, then it does not escape these values when outputting to the browser leading to an Authenticated Stored XSS Cross-Site Scripting issue.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Nickmomrik

Products

Simple Post

CVE-2021-24565

Contact Form 7 Captcha < 0.0.9 - CSRF to Stored XSS

The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings, allowing attacker to make a logged in user with the manage_options change them. Furthermore, the settings are not escaped when output in attributes, leading to a Stored Cross-Site Scripting issue.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Contact Form 7 Captcha Project

Products

Contact Form 7 Captcha

CVE-2021-24564

WPFront Scroll Top < 2.0.6.07225 - Authenticated Stored XSS

The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Wpfront

Products

Scroll Top

CVE-2021-24563

Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting

The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered when someone access the file directly

CVSS 3.1 · 6.1 Medium EPSS 26.3% KEV · Not listed

Vendors

Frontend Uploader Project

Products

Frontend Uploader

CVE-2021-24562

LifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR

The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue, allowing students to see other student answers and grades

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Lifterlms

Products

Lifterlms

CVE-2021-24560

Software License Manager < 4.4.8 - Reflected Cross-Site Scripting

The Software License Manager WordPress plugin before 4.4.8 does not sanitise or escape the edit_record parameter before outputting it back in the page in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Tipsandtricks-hq

Products

Software License Manager

CVE-2021-24558

Project Status <= 1.6 - Reflected Cross-Site Scripting (XSS)

The pspin_duplicate_post_save_as_new_post function of the Project Status WordPress plugin through 1.6 does not sanitise, validate or escape the post GET parameter passed to it before outputting it in an error message when the related post does not exist, leading to a reflected XSS issue

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

3.7designs

Products

Project Status