0.0

CVE-2024-56041 - WordPress VibeBP plugin < 1.9.9.5.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through < 1.9.9.5.1.

📅 Published: Dec. 31, 2024, 12:57 p.m. 🔄 Last Modified: April 1, 2026, 4:21 p.m.

0.0

CVE-2024-56039 - WordPress VibeBP plugin < 1.9.9.7.7 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through < 1.9.9.7.7.

📅 Published: Dec. 31, 2024, 12:55 p.m. 🔄 Last Modified: April 1, 2026, 4:21 p.m.

0.0

CVE-2024-56064 - WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through <= 2.3.3.

📅 Published: Dec. 31, 2024, 12:54 p.m. 🔄 Last Modified: April 1, 2026, 4:21 p.m.

9.8

CVSS3.1

CVE-2024-56046 - WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through <= 1.9.9.

📅 Published: Dec. 31, 2024, 12:53 p.m. 🔄 Last Modified: April 1, 2026, 4:21 p.m.

0.0

CVE-2024-56068 - WordPress WP SuperBackup plugin <= 2.3.3 - Subscriber+ PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup.This issue affects WP SuperBackup: from n/a through <= 2.3.3.

📅 Published: Dec. 31, 2024, 12:51 p.m. 🔄 Last Modified: April 1, 2026, 4:21 p.m.

0.0

CVE-2024-55991 - WordPress CRM Plugin – WP-CRM System plugin <= 3.2.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through <= 3.2.9.1.

📅 Published: Dec. 31, 2024, 12:51 p.m. 🔄 Last Modified: April 1, 2026, 4:21 p.m.

0.0

CVE-2024-56031 - WordPress Smart Shopify Product plugin <= 1.0.2 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Yulio Aleman Jimenez Smart Shopify Product smart-shopify-product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Shopify Product: from n/a through <= 1.0.2.

📅 Published: Dec. 31, 2024, 12:49 p.m. 🔄 Last Modified: April 1, 2026, 4:21 p.m.

0.0

CVE-2024-56067 - WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Backup File Download Vulnerability

Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through <= 2.3.3.

📅 Published: Dec. 31, 2024, 12:48 p.m. 🔄 Last Modified: April 1, 2026, 4:21 p.m.

5.3

CVSS3.1

CVE-2023-48775 - WordPress WP CleanFix plugin <= 5.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2.

📅 Published: Dec. 31, 2024, 12:47 p.m. 🔄 Last Modified: Dec. 31, 2024, 6:10 p.m.

4.3

CVSS3.1

CVE-2023-50850 - WordPress Woo Subscriptions plugin < 5.8.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Subscriptions: from n/a before 5.8.0.

📅 Published: Dec. 31, 2024, 12:46 p.m. 🔄 Last Modified: Dec. 31, 2024, 3:09 p.m.
Total resulsts: 344055
Page 6810 of 34,406
« previous page » next page
Filters