CVE-2021-24557

M-vSlider <= 2.1.3 - Authenticated (admin+) SQL Injection

The update functionality in the rslider_page uses an rs_id POST parameter which is not validated, sanitised or escaped before being inserted in sql query, therefore leading to SQL injection for users having Administrator role.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Nimble3

Products

M-vslider

CVE-2021-24556

Email Subscriber <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

The kento_email_subscriber_ajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sanitise, validate and escape the submitted subscribe_email and subscribe_name POST parameters, inserting them in the DB and then outputting them back in the Subscriber list (/wp-admin/edit.php?post_type=kes_campaign&page=kento_email_subscriber_list_settings), leading a Stored XSS issue.

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed

Vendors

Email-subscriber Project

Products

Email-subscriber

CVE-2021-24555

Diary & Availability Calendar <= 1.0.3 - Authenticated (subscriber+) SQL Injection

The daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes the id POST parameter which is passed into the SQL statement without proper sanitisation, validation or escaping, leading to a SQL Injection issue. Furthermore, the ajax action is lacking any CSRF and capability check, making it available to any authenticated user.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Roosty

Products

Diary-availability-calendar

CVE-2021-24554

Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue

CVSS 3.1 · 7.2 High EPSS 6.6% KEV · Not listed

Vendors

Freelancetoindia

Products

Paytm-pay

CVE-2021-24553

Timeline Calendar <= 1.2 - Authenticated (admin+) SQL Injection

The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before using it in a SQL statement when editing events, leading to an authenticated SQL injection issue. Other SQL Injections are also present in the plugin

CVSS 3.1 · 7.2 High EPSS 1.6% KEV · Not listed

Vendors

Timeline Calendar Project

Products

Timeline Calendar

CVE-2021-24552

Simple Events Calendar <= 1.4.0 - Authenticated (admin+) SQL Injection

The Simple Events Calendar WordPress plugin through 1.4.0 does not sanitise, validate or escape the event_id POST parameter before using it in a SQL statement when deleting events, leading to an authenticated SQL injection issue

CVSS 3.1 · 7.2 High EPSS 1.6% KEV · Not listed

Vendors

Simple Events Calendar Project

Products

Simple Events Calendar

CVE-2021-24551

Edit Comments <= 0.3 - Unauthenticated SQL Injection

The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jal_edit_comments GET parameter before using it in a SQL statement, leading to a SQL injection issue

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed

Vendors

Edit Comments Project

Products

Edit Comments

CVE-2021-24550

Broken Link Manager <= 0.6.5 - Authenticated (admin+) SQL Injection

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue

CVSS 3.1 · 7.2 High EPSS 1.6% KEV · Not listed

Vendors

Broken Link Manager Project

Products

Broken Link Manager

CVE-2021-24549

AceIDE <= 2.6.2 - Authenticated (admin+) Arbitrary File Access

The AceIDE WordPress plugin through 2.6.2 does not sanitise or validate the user input which is appended to system paths before using it in various actions, such as to read arbitrary files from the server. This allows high privilege users such as administrator to access any file on the web server outside of the blog directory via a path traversal attack.

CVSS 3.1 · 4.9 Medium EPSS 1.6% KEV · Not listed

Vendors

Aceide Project

Products

Aceide

CVE-2021-24548

Mimetic Books <= 0.2.13 - Authenticated Stored Cross-Site Scripting (XSS)

The Mimetic Books WordPress plugin through 0.2.13 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS) in the "Default Publisher ID" field on the plugin's settings page.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Mimetic

Products

Mimetic Books

CVE-2021-24547

KN Fix Your Title <= 1.0.1 - Authenticated Stored XSS

The KN Fix Your Title WordPress plugin through 1.0.1 was vulnerable to Authenticated Stored XSS in the separator field.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Kn Fix Your Title Project

Products

Kn Fix Your Title

CVE-2021-24546

EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code

CVSS 3.1 · 8.8 High EPSS 1.8% KEV · Not listed

Vendors

Extendify

Products

Editorskit

CVE-2021-24545

WP HTML Author Bio <= 1.2.0 - Author+ Stored Cross-Site Scripting

The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could perform Cross-Site Scripting attacks against users, which could potentially lead to privilege escalation when an admin view the related post/s.

CVSS 3.1 · 5.4 Medium EPSS 1.8% KEV · Not listed

Vendors

Wp Html Author Bio Project

Products

Wp Html Author Bio

CVE-2021-24544

Responsive WordPress Slider <= 2.2.0 - Subscriber+ Stored Cross-Site Scripting

The Responsive WordPress Slider WordPress plugin through 2.2.0 does not sanitise and escape some of the Slider options, allowing Cross-Site Scripting payloads to be set in them. Furthermore, as by default any authenticated user is allowed to create Sliders (https://wordpress.org/support/topic/slider-can-be-changed-from-any-user-even-subscriber/, such settings can be changed in the plugin's settings), this would allow user with a role as low as subscriber to perform Cross-Site Scripting attacks against logged in admins viewing the slider list and could lead to privilege escalation by creating a rogue admin account for example.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Motopress

Products

Motopress-slider-lite

CVE-2021-24543

jQuery Reply to Comment <= 1.31 - CSRF to Stored Cross-Site Scripting

The jQuery Reply to Comment WordPress plugin through 1.31 does not have any CSRF check when saving its settings, nor sanitise or escape its 'Quote String' and 'Reply String' settings before outputting them in Comments, leading to a Stored Cross-Site Scripting issue.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Jquery-reply-to-comment Project

Products

Jquery-reply-to-comment

CVE-2021-24541

Wonder PDF Embed < 1.7 - Contributor+ Stored XSS

The Wonder PDF Embed WordPress plugin before 1.7 does not escape parameters of its wonderplugin_pdf shortcode, which could allow users with a role as low as Contributor to perform Stored XSS attacks.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Wonderplugin

Products

Wonder Pdf Embed

CVE-2021-24540

Wonder Video Embed < 1.8 - Contributor+ Stored XSS

The Wonder Video Embed WordPress plugin before 1.8 does not escape parameters of its wonderplugin_video shortcode, which could allow users with a role as low as Contributor to perform Stored XSS attacks.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Wonderplugin

Products

Wonder Video Embed

CVE-2021-24539

Coming Soon, Under Construction & Maintenance Mode By Dazzler < 1.6.7 - Admin+ Stored Cross-Site Scripting

The Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin before 1.6.7 does not sanitise or escape its description setting when outputting it in the frontend when the Coming Soon mode is enabled, even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Dazzlersoftware

Products

Coming Soon\, Under Construction \& Maintenance Mode By Dazzler

CVE-2021-24538

Current Book <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS)

The Current Book WordPress plugin through 1.0.1 does not sanitize user input when an authenticated user adds Author or Book Title, then does not escape these values when outputting to the browser leading to an Authenticated Stored XSS Cross-Site Scripting issue.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Current Book Project

Products

Current Book

CVE-2021-24537

Similar Posts <= 3.1.5 - Admin+ Arbitrary PHP Code Execution

The Similar Posts WordPress plugin through 3.1.5 allow high privilege users to execute arbitrary PHP code in an hardened environment (ie with DISALLOW_FILE_EDIT, DISALLOW_FILE_MODS and DISALLOW_UNFILTERED_HTML set to true) via the 'widget_rrm_similar_posts_condition' widget setting of the plugin.

CVSS 3.1 · 7.2 High EPSS 1.6% KEV · Not listed

Vendors

Shareaholic

Products

Similar Posts