WP
Vendor
Wordpress Plugin
13
CVEs
0
On KEV
0
New 30D
Products
SB6.1
Simple Buttons Creator
Wordpress Plugin
2 CVEs0 on KEV0 new
WP6.1
Wp-cart-for-digital-products
Wordpress Plugin
2 CVEs0 on KEV0 new
AG6.8
Agca
Wordpress Plugin
1 CVEs0 on KEV0 new
HC6.4
Hcaptcha
Wordpress Plugin
1 CVEs0 on KEV0 new
IA6.5
Infolinks AD Wrap
Wordpress Plugin
1 CVEs0 on KEV0 new
PF8.8
PZ Frontend Manager
Wordpress Plugin
1 CVEs0 on KEV0 new
RV5.4
Responsive Video Embed
Wordpress Plugin
1 CVEs0 on KEV0 new
SI4.3
Similarity
Wordpress Plugin
1 CVEs0 on KEV0 new
SP4.0
Simple Photoswipe
Wordpress Plugin
1 CVEs0 on KEV0 new
SF5.4
Special Feed Items
Wordpress Plugin
1 CVEs0 on KEV0 new
VT5.4
Vikinghammer Tweet
Wordpress Plugin
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-8051 | SF Special Feed Items Wordpress Plugin | 5.4 | Sep 17 | Special Feed Items <= 1.0.1 - Stored XSS via CSRF |
| CVE-2024-8044 | IA Infolinks AD Wrap Wordpress Plugin | 6.5 | Sep 17 | infolinks Ad Wrap <= 1.0.2 - Settings Update via CSRF |
| CVE-2024-8043 | VT Vikinghammer Tweet Wordpress Plugin | 5.4 | Sep 17 | Vikinghammer Tweet <= 0.2.4 - Stored XSS via CSRF |
| CVE-2024-6244 | PF PZ Frontend Manager Wordpress Plugin | 8.8 | Jul 22 | pz-frontend-manager < 1.0.6 - CSRF change user profile picture |
| CVE-2024-6073 | WP Wp-cart-for-digital-products Wordpress Plugin | 6.1 | Jul 15 | WP eStore < 8.5.5 - Reflected XSS in Discount Editing |
| CVE-2024-6072 | WP Wp-cart-for-digital-products Wordpress Plugin | 6.1 | Jul 15 | WP eStore < 8.5.5 - Reflected XSS via $_SERVER['REQUEST_URI'] |
| CVE-2024-5473 | SP Simple Photoswipe Wordpress Plugin | 4.0 | Jun 26 | Simple Photoswipe <= 0.1 - Admin+ Stored XSS |
| CVE-2024-5475 | RV Responsive Video Embed Wordpress Plugin | 5.4 | Jun 20 | Responsive video embed < 0.5.1 - Contributor+ Stored XSS |
| CVE-2024-3972 | SI Similarity Wordpress Plugin | 4.3 | Jun 14 | Similarity <= 3.0 - Stored XSS via CSRF |
| CVE-2024-2907 | AG Agca Wordpress Plugin | 6.8 | Apr 25 | AGCA – Custom Dashboard & Login Page < 7.2.2 - Admin+ Stored XSS via Image URL |
| CVE-2024-4014 | HC Hcaptcha Wordpress Plugin | 6.4 | Apr 20 | hCaptcha for WordPress <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7-hcaptcha Shortcode |
| CVE-2024-2858 | SB Simple Buttons Creator Wordpress Plugin | 4.8 | Apr 15 | Simple Buttons Creator <= 1.04 - Aribtrary Button Deletion via CSRF |
| CVE-2024-2857 | SB Simple Buttons Creator Wordpress Plugin | 6.1 | Apr 15 | Simple Buttons Creator <= 1.04 - Unauthenticated Stored XSS |