CVE-2021-24985

Easy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site Scripting

The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed

Vendors

Yikesinc

Products

Easy Forms For Mailchimp

CVE-2021-24984

WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site Scripting

The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Wpfront

Products

Wpfront User Role Editor

CVE-2021-24983

Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting via AJAX Action

The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not sanitise and escape POSted parameters sent to the wpassetcleanup_fetch_active_plugins_icons AJAX action (available to admin users), leading to a Reflected Cross-Site Scripting issue

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Asset Cleanup\

Products

Page Speed Booster Project

CVE-2021-24982

Child Theme Generator <= 2.2.7 - Reflected Cross-Site Scripting

The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting it back, leading to a Reflected Cross-Site Scripting in the admin dashboard

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Childtheme-generator

Products

Child Theme Generator

CVE-2021-24981

Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload

The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed

Vendors

Wpwax

Products

Directorist

CVE-2021-24980

Gwolle Guestbook < 4.2.0 - Reflected Cross-Site Scripting

The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Gwolle Guestbook Project

Products

Gwolle Guestbook

CVE-2021-24979

Paid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting

The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS 1.7% KEV · Not listed

Vendors

Strangerstudios

Products

Paid Memberships Pro

CVE-2021-24978

OSMapper <= 2.1.5 - Unauthenticated Arbitrary Post Deletion

The OSMapper WordPress plugin through 2.1.5 contains an AJAX action to delete a plugin related post type named 'map' and is registered with the wp_ajax_nopriv prefix, making it available to unauthenticated users. There is no authorisation, CSRF and checks in place to ensure that the post to delete is a map one. As a result, unauthenticated user can delete arbitrary posts from the blog

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

B4after

Products

Osmapper

CVE-2021-24976

Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting

The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Wbolt

Products

Smart Seo Tool

CVE-2021-24975

NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed

Vendors

Nextscripts

Products

Social Networks Auto Poster

CVE-2021-24974

Product Feed PRO for WooCommerce < 11.0.7 - Subscriber+ Settings Update to Stored XSS

The Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could lead to Stored Cross-Site Scripting issue (which will be triggered in the admin dashboard) due to the lack of escaping.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Adtribes

Products

Product Feed Pro For Woocommerce

CVE-2021-24973

Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site Scripting

The Site Reviews WordPress plugin before 5.17.3 does not sanitise and escape the site-reviews parameter of the glsr_action AJAX action (available to unauthenticated and any authenticated users), allowing them to perform Cross-Site Scripting attacks against logged in admins viewing the Tool dashboard of the plugin

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed

Vendors

Geminilabs

Products

Site Reviews

CVE-2021-24972

Pixel Cat Lite < 2.6.3 - Admin+ Stored Cross-Site Scripting

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Fatcatapps

Products

Pixel Cat

CVE-2021-24971

WP Responsive Menu < 3.1.7.1 - Subscriber+ Settings Update to Stored XSS

The WP Responsive Menu WordPress plugin before 3.1.7.1 does not have capability and CSRF checks in the wpr_live_update AJAX action, as well as do not sanitise and escape some of the data submitted. As a result, any authenticated, such as subscriber could update the plugin's settings and perform Cross-Site Scripting attacks against all visitor and users on the frontend

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Magnigenie

Products

Wp Responsive Menu

CVE-2021-24970

All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion

The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue

CVSS 3.1 · 7.2 High EPSS 5.0% KEV · Not listed

Vendors

Plugins360

Products

All-in-one Video Gallery

CVE-2021-24968

Ultimate FAQ < 2.1.2 - Subscriber+ Arbitrary FAQ Creation

The Ultimate FAQ WordPress plugin before 2.1.2 does not have capability and CSRF checks in the ewd_ufaq_welcome_add_faq and ewd_ufaq_welcome_add_faq_page AJAX actions, available to any authenticated users. As a result, any users, with a role as low as Subscriber could create FAQ and FAQ questions

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Etoilewebdesign

Products

Ultimate Faq

CVE-2021-24967

Contact Form & Lead Form Elementor Builder < 1.6.4 - Unauthenticated Stored Cross-Site Scripting

The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.6.4 does not sanitise and escape some lead values, which could allow unauthenticated users to perform Cross-Site Scripting attacks against logged in admin viewing the inserted Leads

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed

Vendors

Themehunk

Products

Contact Form \& Lead Form Elementor Builder

CVE-2021-24966

Error Log Viewer Plugin <= 1.1.1 - Admin+ Arbitrary File Clearing

The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outside of the blog folder

CVSS 3.1 · 4.9 Medium EPSS 5.2% KEV · Not listed

Vendors

Bestwebsoft

Products

Error Log Viewer

CVE-2021-24965

Five Star Restaurant Reservations < 2.4.8 - Subscriber+ Stored Cross-Site Scripting

The Five Star Restaurant Reservations WordPress plugin before 2.4.8 does not have capability and CSRF checks in the rtb_welcome_set_schedule AJAX action, allowing any authenticated users to call it. Due to the lack of sanitisation and escaping, users with a role as low as subscriber could perform Cross-Site Scripting attacks against logged in admins

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Fivestarplugins

Products

Five Star Restaurant Reservations

CVE-2021-24963

LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site Scripting

The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qc_res parameter before outputting it back in the JS code of an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Litespeedtech

Products

Litespeed Cache