CVE-2021-24187

SEO Redirection < 6.4 - Authenticated Reflected Cross-Site Scripting (XSS)

The setting page of the SEO Redirection Plugin - 301 Redirect Manager WordPress plugin before 6.4 is vulnerable to reflected Cross-Site Scripting (XSS) as user input is not properly sanitised before being output in an attribute.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Clogica

Products

Seo Redirection

CVE-2021-24186

Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id

The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Themeum

Products

Tutor Lms

CVE-2021-24185

Tutor LMS < 1.7.7 - SQL Injection via tutor_place_rating

The tutor_place_rating AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Themeum

Products

Tutor Lms

CVE-2021-24184

Tutor LMS < 1.7.7 - Unprotected AJAX including Privilege Escalation

Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and elevate their privileges among many other actions.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Themeum

Products

Tutor Lms

CVE-2021-24183

Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form

The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed

Vendors

Themeum

Products

Tutor Lms

CVE-2021-24182

Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_question

The tutor_quiz_builder_get_answers_by_question AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed

Vendors

Themeum

Products

Tutor Lms

CVE-2021-24181

Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct

The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Themeum

Products

Tutor Lms

CVE-2021-24180

Related Posts for WordPress < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)

Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting (XSS) vulnerability within the 'lang' GET parameter while editing a post, triggered when users with the capability of editing posts access a malicious URL.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Never5

Products

Related Posts

CVE-2021-24179

Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files. As the plugin also did not validate uploaded files, it could lead to RCE.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Strategy11

Products

Business Directory Plugin - Easy Listing Directories

CVE-2021-24178

Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issues.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Strategy11

Products

Business Directory Plugin - Easy Listing Directories

CVE-2021-24176

JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard.

CVSS 3.1 · 5.4 Medium EPSS 2.0% KEV · Not listed

Vendors

Jh 404 Logger Project

Products

Jh 404 Logger

CVE-2021-24175

The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated users to log in as any user (including admin) by just providing the related username, as well as create accounts with arbitrary roles, such as admin. These issues can be exploited even if registration is disabled, and the Login widget is not active.

CVSS 3.1 · 9.8 Critical EPSS 17.2% KEV · Not listed

Vendors

Posimyth

Products

The Plus Addons For Elementor

CVE-2021-24174

Database Backups <= 1.2.2.6 - CSRF to Backup Download

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.

CVSS 3.1 · 8.1 High EPSS 3.2% KEV · Not listed

Vendors

Database-backups Project

Products

Database-backups

CVE-2021-24173

VM Backups <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Site Scripting issue.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Vm Backups Project

Products

Vm Backups

CVE-2021-24172

VM Backups <= 1.0 - CSRF to Database Backup Download

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current .

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Vm Backups Project

Products

Vm Backups

CVE-2021-24170

User Profile Picture < 2.5.0 - Sensitive Information Disclosure

The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the upload_files capability. This included password hashes, hashed user activation keys, usernames, emails, and other less sensitive information.

CVSS 3.1 · 7.5 High EPSS 5.6% KEV · Not listed

Vendors

Cozmoslabs

Products

User Profile Picture

CVE-2021-24169

Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS.

CVSS 3.1 · 6.1 Medium EPSS 10.3% KEV · Not listed

Vendors

Algolplus

Products

Advanced Order Export For Woocommerce

CVE-2021-24168

Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting (XSS)

The Easy Contact Form Pro WordPress plugin before 1.1.1.9 did not properly sanitise the text fields (such as Email Subject, Email Recipient, etc) when creating or editing a form, leading to an authenticated (author+) stored cross-site scripting issue. This could allow medium privilege accounts (such as author and editor) to perform XSS attacks against high privilege ones like administrator.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Easy Contact Form Pro Project

Products

Easy Contact Form Pro

CVE-2021-24167

Web-Stat < 1.4.1 - API Key Disclosure

When visiting a site running Web-Stat < 1.4.0, the "wts_web_stat_load_init" function used the visitor’s browser to send an XMLHttpRequest request to https://wts2.one/ajax.htm?action=lookup_WP_account.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Web-stat

Products

Web-stat

CVE-2021-24166

Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection

The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Ninjaforms

Products

Ninja Forms