Search vulnerabilities

Expected end of text, found '/' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,694

CVE-2021-24257

Premium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)

The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Leap13
Products
Premium Addons For Elementor
CVE-2021-24256

Elementor - Header, Footer & Blocks Template < 1.5.8 - Contributor+ Stored XSS

The “Elementor – Header, Footer & Blocks Template” WordPress Plugin before 1.5.8 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Brainstormforce
Products
Elementor - Header\, Footer \& Blocks Template
CVE-2021-24255

Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, both via a similar method.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Wpdeveloper
Products
Essential Addons For Elementor
CVE-2021-24254

College Publisher Import <= 0.1 - Arbitrary File Upload to RCE

The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing high privilege users to upload arbitrary files, such as PHP, leading to RCE. Due to the lack of CSRF check, the issue could also be exploited via a CSRF attack.

CVSS 3.1 · 7.2 High EPSS 1.8% KEV · Not listed
Vendors
College Publisher Import Project
Products
College Publisher Import
CVE-2021-24253

Classyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE

The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Classyfrieds Project
Products
Classyfrieds
CVE-2021-24252

Event Banner <= 1.3 - Arbitrary File Upload to RCE

The Event Banner WordPress plugin through 1.3 does not verify the uploaded image file, allowing admin accounts to upload arbitrary files, such as .exe, .php, or others executable, leading to RCE. Due to the lack of CSRF check, the issue can also be used via such vector to achieve the same result, or via a LFI as authorisation checks are missing (but would require WP to be loaded)

CVSS 3.1 · 7.2 High EPSS 1.7% KEV · Not listed
Vendors
Wp-eventmanager
Products
Event Banner
CVE-2021-24251

Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their status (from pending to completed to example)

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Strategy11
Products
Business Directory Plugin - Easy Listing Directories
CVE-2021-24250

Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Strategy11
Products
Business Directory Plugin - Easy Listing Directories
CVE-2021-24249

Business Directory Plugin < 5.11.2 - Arbitrary Listing Export

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Strategy11
Products
Business Directory Plugin - Easy Listing Directories
CVE-2021-24248

Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE

CVSS 3.1 · 7.2 High EPSS 1.6% KEV · Not listed
Vendors
Strategy11
Products
Business Directory Plugin - Easy Listing Directories
CVE-2021-24247

Contact Form Check Tester <= 1.0.2 - Broken Access Control to Cross-Site Scripting (XSS)

The Contact Form Check Tester WordPress plugin through 1.0.2 settings are visible to all registered users in the dashboard and are lacking any sanitisation. As a result, any registered user, such as subscriber, can leave an XSS payload in the plugin settings, which will be triggered by any user visiting them, and could allow for privilege escalation. The vendor decided to close the plugin.

CVSS 3.1 · 5.4 Medium EPSS 4.7% KEV · Not listed
Vendors
Mooveagency
Products
Contact Form Check Tester
CVE-2021-24246

WorkScout Core < 1.3.4 - Authenticated Stored XSS & XFS

The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX action, leading to Stored Cross-Site Scripting and Cross-Frame Scripting issues

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Purethemes
Products
Workscout Workscout Core
CVE-2021-24245

Stop Spammers < 2021.9 - Reflected Cross-Site Scripting (XSS)

The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests (such as matching a spam word), outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue.

CVSS 3.1 · 6.1 Medium EPSS 5.7% KEV · Not listed
Vendors
Trumani
Products
Stop Spammers
CVE-2021-24244

WPBakery Page Builder Clipboard < 4.5.8 - Unauthorised Arbitrary License Options Update

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Wpbakery Page Builder Clipboard Project
Products
Wpbakery Page Builder Clipboard
CVE-2021-24243

WPBakery Page Builder Clipboard < 4.5.6 - Subscriber+ Stored Cross-Site Scripting (XSS)

An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.6 did not have capability checks nor sanitization, allowing low privilege users (subscriber+) to call it and set XSS payloads, which will be triggered in all backend pages.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Wpbakery Page Builder Clipboard Project
Products
Wpbakery Page Builder Clipboard
CVE-2021-24242

Tutor LMS < 1.8.8 - Authenticated Local File Inclusion

The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed sub_page parameter of the plugin's Tools, allowing high privilege users to include any local php file

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Themeum
Products
Tutor Lms
CVE-2021-24241

Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)

The Advanced Custom Fields Pro WordPress plugin before 5.9.1 did not properly escape the generated update URL when outputting it in an attribute, leading to a reflected Cross-Site Scripting issue in the update settings page.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Advancedcustomfields
Products
Advanced Custom Fields
CVE-2021-24240

Business Hours Pro <= 5.5.0 - Unauthenticated Arbitrary File Upload to RCE

The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Aivahthemes
Products
Business Hours Pro
CVE-2021-24239

Pie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaion_code GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue.

CVSS 3.1 · 6.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Genetechsolutions
Products
Pie Register
CVE-2021-24238

Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR

The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not ensure that the requested property to be deleted belong to the user making the request, allowing any authenticated users to delete arbitrary properties by tampering with the property_id parameter.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Purethemes
Products
Findeo Realteo