CVE-2021-24316

Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue.

CVSS 3.1 · 6.1 Medium EPSS 6.4% KEV · Not listed

Vendors

Wowthemes

Products

Mediumish

CVE-2021-24315

Give WP < 2.10.4 - Authenticated Stored Cross-Site Scripting (XSS)

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.4 did not sanitise or escape the Background Image field of its Stripe Checkout Setting and Logo field in its Email settings, leading to authenticated (admin+) Stored XSS issues.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Givewp

Products

Givewp

CVE-2021-24314

Goto < 2.1 - Unauthenticated Blind SQL Injection

The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed

Vendors

Boostifythemes

Products

Goto

CVE-2021-24313

WP Prayer < 1.6.2 - Authenticated Stored Cross-Site Scripting (XSS)

The WP Prayer WordPress plugin before 1.6.2 provides the functionality to store requested prayers/praises and list them on a WordPress website. These stored prayer/praise requests can be listed by using the WP Prayer engine. An authenticated WordPress user with any role can fill in the form to request a prayer. The form to request prayers or praises have several fields. The 'prayer request' and 'praise request' fields do not use proper input validation and can be used to store XSS payloads.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Goprayer

Products

Wp Prayer

CVE-2021-24312

WP Super Cache < 1.7.3 - Authenticated Remote Code Execution

The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of '$' and '\n'. This is due to an incomplete fix of CVE-2021-24209.

CVSS 3.1 · 7.2 High EPSS 1.9% KEV · Not listed

Vendors

Automattic

Products

Wp Super Cache

CVE-2021-24311

External Media < 1.0.34 - Authenticated Arbitrary File Upload

The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users.

CVSS 3.1 · 8.8 High EPSS 1.8% KEV · Not listed

Vendors

External Media Project

Products

External Media

CVE-2021-24310

Photo Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery Title

The Photo Gallery by 10Web - Mobile-Friendly Image Gallery WordPress plugin before 1.5.67 did not properly sanitise the gallery title, allowing high privilege users to create one with XSS payload in it, which will be triggered when another user will view the gallery list or the affected gallery in the admin dashboard. This is due to an incomplete fix of CVE-2019-16117

CVSS 3.1 · 4.8 Medium EPSS 1.1% KEV · Not listed

Vendors

10web

Products

Photo Gallery

CVE-2021-24309

Weekly Schedule < 3.4.3 - Authenticated Stored XSS

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Weekly Schedule Project

Products

Weekly Schedule

CVE-2021-24308

LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile

The 'State' field of the Edit profile page of the LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.1 is not properly sanitised when output in the About section of the profile page, leading to a stored Cross-Site Scripting issue. This could allow low privilege users (such as students) to elevate their privilege via an XSS attack when an admin will view their profile.

CVSS 3.1 · 5.4 Medium EPSS 3.2% KEV · Not listed

Vendors

Lifterlms

Products

Lifterlms

CVE-2021-24307

All in One SEO Pack < 4.1.0.2 - Admin RCE via unserialize

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseo_tools_settings" privilege (most of the time admin) to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup .ini file in the section "Tool > Import/Export". However, the plugin attempts to unserialize values of the .ini file. Moreover, the plugin embeds Monolog library which can be used to craft a gadget chain and thus trigger system command execution.

CVSS 3.1 · 8.8 High EPSS 53.3% KEV · Not listed

Vendors

Aioseo

Products

All In One Seo

CVE-2021-24306

Ultimate Member < 2.1.20 - Authenticated Reflected Cross-Site Scripting (XSS)

The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin before 2.1.20 did not properly sanitise, validate or encode the query string when generating a link to edit user's own profile, leading to an authenticated reflected Cross-Site Scripting issue. Knowledge of the targeted username is required to exploit this, and attackers would then need to make the related logged in user open a malicious link.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Ultimatemember

Products

Ultimate Member

CVE-2021-24305

Target First Plugin 2.0 - Unauthenticated Stored XSS via Licence Key

The Target First WordPress Plugin v2.0, also previously known as Watcheezy, suffers from a critical unauthenticated stored XSS vulnerability. An attacker could change the licence key value through a POST on any URL with the 'weeWzKey' parameter that will be save as the 'weeID option and is not sanitized.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed

Vendors

Targetfirst

Products

Watcheezy

CVE-2021-24304

Newsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS)

The Newsmag WordPress theme before 5.0 does not sanitise the td_block_id parameter in its td_ajax_block AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed

Vendors

Tagdiv

Products

Newsmag

CVE-2021-24303

JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Jiangqie

Products

Official Website Mini Program

CVE-2021-24302

Hana Flv Player <= 3.1.3 - Authenticated Stored Cross-Site Scripting (XSS)

The Hana Flv Player WordPress plugin through 3.1.3 is vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the 'Default Skin' field.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Neox

Products

Hana Flv Player

CVE-2021-24301

Hotjar Connecticator <= 1.1.1 - Authenticated Stored Cross-Site Scripting (XSS)

The Hotjar Connecticator WordPress plugin through 1.1.1 is vulnerable to Stored Cross-Site Scripting (XSS) in the 'hotjar script' textarea. The request did include a CSRF nonce that was properly verified by the server and this vulnerability could only be exploited by administrator users.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Bluemedicinelabs

Products

Hotjar Connecticator

CVE-2021-24300

PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)

The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue

CVSS 3.1 · 6.1 Medium EPSS 10.6% KEV · Not listed

Vendors

Pickplugins

Products

Product Slider For Woocommerce

CVE-2021-24299

ReDi Restaurant Reservations < 21.0426 - Unauthenticated Stored Cross-Site Scripting (XSS)

The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant reservation. The form to make a restaurant reservation field called 'Comment' does not use proper input validation and can be used to store XSS payloads. The XSS payloads will be executed when the plugin user goes to the 'Upcoming' page, which is an external website https://upcoming.reservationdiary.eu/ loaded in an iframe, and the stored reservation with XSS payload is loaded.

CVSS 3.1 · 6.1 Medium EPSS 5.5% KEV · Not listed

Vendors

Catzsoft

Products

Redi Restaurant Reservation

CVE-2021-24298

Simple Giveaways < 2.36.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS

CVSS 3.1 · 6.1 Medium EPSS 3.5% KEV · Not listed

Vendors

Ibenic

Products

Simple Giveaways

CVE-2021-24297

Goto < 2.1 - Reflected Cross-Site Scripting (XSS)

The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Boostifythemes

Products

Goto