CVE-2021-24424

WP Reset < 1.90 - Authenticated Stored XSS

The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extra_data parameter when creating a snapshot via the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Webfactoryltd

Products

Wp Reset

CVE-2021-24423

UpdraftPlus < 1.16.59 - Admin+ Stored Cross-Site Scripting

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings, allowing high privilege users to set malicious JavaScript payload in it and leading to a Stored Cross-Site Scripting issue

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Updraftplus

Products

Updraftplus

CVE-2021-24421

WP JobSearch < 1.7.4 - Authenticated Stored XSS

The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before outputting them in the page, allowing low privilege users to use JavaScript payloads in them and leading to a Stored Cross-Site Scripting issue

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Eyecix

Products

Jobsearch Wp Job Board

CVE-2021-24420

Request a Quote < 2.3.4 - Authenticated Stored XSS

The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the 'All Quotes" table.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Emarketdesign

Products

Request A Quote

CVE-2021-24419

WP YouTube Lyte < 1.7.16 - Authenticated Stored XSS

The WP YouTube Lyte WordPress plugin before 1.7.16 did not sanitise or escape its lyte_yt_api_key and lyte_notification settings before outputting them back in the page, allowing high privilege users to set XSS payload on them and leading to stored Cross-Site Scripting issues.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Wp Youtube Lyte Project

Products

Wp Youtube Lyte

CVE-2021-24418

Smooth Scroll Page Up/Down Buttons <= 1.4 - Authenticated Stored XSS via psb_positioning

The Smooth Scroll Page Up/Down Buttons WordPress plugin through 1.4 does not properly sanitise and validate its psb_positioning settings, allowing high privilege users such as admin to set an XSS payload in it, which will be executed in all pages of the blog

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Smooth Scroll Page Up\/down Buttons Project

Products

Smooth Scroll Page Up\/down Buttons

CVE-2021-24416

StreamCast < 2.1.1 - Contributor+ Stored Cross-Site Scripting

The StreamCast – Radio Player for WordPress plugin before 2.1.1 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Bplugins

Products

Streamcast Radio Player

CVE-2021-24415

Polo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site Scripting

The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Bplugins

Products

Polo Video Gallery

CVE-2021-24414

YT Player < 1.4 - Contributor+ Stored Cross-Site Scripting

The Video Player for YouTube WordPress plugin before 1.4 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Video Player For Youtube Project

Products

Video Player For Youtube

CVE-2021-24413

Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site Scripting

The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Bplugins

Products

Easy Twitter Feed

CVE-2021-24412

Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting

The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Bplugins

Products

Html5 Audio Player

CVE-2021-24411

Social Tape <= 1.0 - CSRF to Stored XSS

The Social Tape WordPress plugin through 1.0 does not have CSRF checks in place when saving its settings, and do not sanitise or escape them before outputting them back in the page, leading to a stored Cross-Site Scripting issue via a CSRF attack

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Social Tape Project

Products

Social Tape

CVE-2021-24410

Telugu Bible Verse Daily <= 1.0 - CSRF to Stored XSS

The తెలుగు బైబిల్ వచనములు WordPress plugin through 1.0 is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when outputting them back in the page. This could allow attackers to make a logged in admin change the settings, as well as add malicious verses containing JavaScript code in them, leading to Stored XSS issues

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Telugu Bible Verse Daily Project

Products

Telugu Bible Verse Daily

CVE-2021-24409

Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS)

The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator

CVSS 3.1 · 6.1 Medium EPSS 1.7% KEV · Not listed

Vendors

Plugin-planet

Products

Prismatic

CVE-2021-24408

Prismatic < 2.8 - Contributor+ Stored XSS

The Prismatic WordPress plugin before 2.8 does not sanitise or validate some of its shortcode parameters, allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still have to be approved by an admin to have the XSS trigger able in the frontend, however, higher privilege users, such as editor could exploit this without the need of approval, and even when the blog disallows the unfiltered_html capability.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Plugin-planet

Products

Prismatic

CVE-2021-24407

Jannah < 5.4.5 - Reflected Cross-Site Scripting (XSS)

The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.

CVSS 3.1 · 6.1 Medium EPSS 2.6% KEV · Not listed

Vendors

Tielabs

Products

Jannah

CVE-2021-24406

wpForo Forum < 1.9.7 - Open Redirect

The wpForo Forum WordPress plugin before 1.9.7 did not validate the redirect_to parameter in the login form of the forum, leading to an open redirect issue after a successful login. Such issue could allow an attacker to induce a user to use a login URL redirecting to a website under their control and being a replica of the legitimate one, asking them to re-enter their credentials (which will then in the attacker hands)

CVSS 3.1 · 6.1 Medium EPSS 2.9% KEV · Not listed

Vendors

Gvectors

Products

Wpforo Forum

CVE-2021-24405

Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting

The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated users (such as subscriber) to change them. If users can't register, this can be done through CSRF. Furthermore, the cookie banner setting is not sanitised or validated before being output in all pages of the frontend and the backend settings one, leading to a Stored Cross-Site Scripting issue.

CVSS 3.1 · 6.5 Medium EPSS 10.7% KEV · Not listed

Vendors

Izsoft

Products

Easy Cookies Policy

CVE-2021-24404

WP-Board <= 1.1 (beta) - Unauthenticated SQL Injection

The options.php file of the WP-Board WordPress plugin through 1.1 beta accepts a postid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is passed twice so if we pass time as 5 seconds it takes 10 seconds to return since the query ran twice.

CVSS 3.1 · 8.8 High EPSS 4.7% KEV · Not listed

Vendors

Wp-board Project

Products

Wp-board

CVE-2021-24403

WordPress Page Contact <= 1.0 - Authenticated (editor+) SQL Injection

The Orders functionality in the WordPress Page Contact plugin through 1.0 has an order_id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. The feature is available to low privilege users such as contributors

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Wpagecontact Project

Products

Wpagecontact