CVE-2021-24875

eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting

The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in the page in an attribute, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1 · 6.1 Medium EPSS 1.7% KEV · Not listed

Vendors

Implecode

Products

Ecommerce Product Catalog

CVE-2021-24874

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.31 does not escape the lang and pid parameter before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Brevo

Products

Newsletter\, Smtp\, Email Marketing And Subscribe

CVE-2021-24873

Tutor LMS < 1.9.11 - Reflected Cross-Site Scripting

The Tutor LMS WordPress plugin before 1.9.11 does not sanitise and escape user input before outputting back in attributes in the Student Registration page, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Themeum

Products

Tutor Lms

CVE-2021-24872

Get Custom Field Values < 4.0 - Contributors+ Arbitrary Post Metadata Access

The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other posts metadata without validating the permissions. Eg. contributors can access admin posts metadata.

CVSS 3.1 · 6.5 Medium EPSS 1.0% KEV · Not listed

Vendors

Get Custom Field Values Project

Products

Get Custom Field Values

CVE-2021-24871

Get Custom Field Values < 4.0.1 - Contributor+ Stored Cross-Site Scripting

The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Get Custom Field Values Project

Products

Get Custom Field Values

CVE-2021-24868

Document Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure

The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Bplugins

Products

Document Embedder

CVE-2021-24867

Backdoored Plugins & Themes from AccessPress Themes

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

CVSS 3.1 · 9.8 Critical EPSS 18.0% KEV · Not listed

Vendors

Accesspressthemes

Products

Accessbuddy Accesspress Anonymous Post Accesspress Basic and 90 more

CVE-2021-24866

WP Data Access < 5.0.0 - Admin+ SQL Injection

The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backup_date parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed

Vendors

Wpdataaccess

Products

Wp Data Access

CVE-2021-24865

Advanced Custom Fields: Extended < 0.8.8.7 - Admin+ SQL Injection

The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 does not validate the order and orderby parameters before using them in a SQL statement, leading to a SQL Injection issue

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Acf-extended

Products

Advanced Custom Fields\

CVE-2021-24864

WP Cloudy < 4.4.9 - Admin+ SQL Injection

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the post_id parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed

Vendors

Wpscan

Products

Wp Cloudy

CVE-2021-24862

RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue

CVSS 3.1 · 7.2 High EPSS 72.7% KEV · Not listed

Vendors

Metagauss

Products

Registrationmagic

CVE-2021-24861

Quotes Collection <= 2.5.2 - Admin+ SQL Injection

The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Quotes Collection Project

Products

Quotes Collection

CVE-2021-24860

BSK PDF Manager < 3.1.2 - Admin+ SQL Injection

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Bannersky

Products

Bsk Pdf Manager

CVE-2021-24859

User Meta Shortcodes <= 0.5 - Contributor+ Unauthorized Arbitrary User Metadata Access

The User Meta Shortcodes WordPress plugin through 0.5 registers a shortcode that allows any user with a role as low as contributor to access other users metadata by specifying the user login as a parameter. This makes the WP instance vulnerable to data extrafiltration, including password hashes

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

User Meta Shortcodes Project

Products

User Meta Shortcodes

CVE-2021-24858

WP Cookie User Info < 1.0.9 - Admin+ SQL Injection

The Cookie Notification Plugin for WordPress plugin before 1.0.9 does not sanitise or escape the id GET parameter before using it in a SQL statement, when retrieving the setting to edit in the admin dashboard, leading to an authenticated SQL Injection

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Accesspressthemes

Products

Wp Cookie User Info

CVE-2021-24857

ToTop Link <= 1.7.1 - Unauthenticated PHP Object Injection

The ToTop Link WordPress plugin through 1.7.1 passes base64 encoded user input to the unserialize() PHP function, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadget chain.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed

Vendors

Nocean

Products

Totop Link

CVE-2021-24856

Shared Files < 1.6.61 - Admin+ Stored Cross-Site Scripting

The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Tammersoft

Products

Shared Files

CVE-2021-24855

Display Post Metadata < 1.5.0 - Contributor+ Stored Cross-Site Scripting

The Display Post Metadata WordPress plugin before 1.5.0 adds a shortcode to print out custom fields, however their content is not sanitised or escaped which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Display Post Metadata Project

Products

Display Post Metadata

CVE-2021-24854

QR Redirector < 1.6.1 - Contributor+ Stored Cross-Site Scripting

The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Scripting attacks.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Qr Redirector Project

Products

Qr Redirector

CVE-2021-24853

QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update

The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscriber to change the redirect response status code of arbitrary QR Redirects

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Qr Redirector Project

Products

Qr Redirector