|
249291
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the removeorder AJAX action in all versions up to, and inclu…
|
CWE-862
Missing Authorization
|
CVE-2024-10853
|
2024-11-13 11:15 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249292
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the buy_one_click_export_options AJAX action in all versions up to…
|
-
|
CVE-2024-10852
|
2024-11-13 11:15 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249293
|
6.5 |
MEDIUM
Network
|
-
|
-
|
The Styler for Ninja Forms plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the deactivate_license fun…
|
CWE-862
Missing Authorization
|
CVE-2024-10717
|
2024-11-13 11:15 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249294
|
6.1 |
MEDIUM
Network
|
-
|
-
|
The WP-Strava plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escap…
|
CWE-80
Basic XSS
|
CVE-2024-10038
|
2024-11-13 11:15 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249295
|
8.8 |
HIGH
Network
|
meowapps
|
photo_engine
|
Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.
|
CWE-862
Missing Authorization
|
CVE-2024-43332
|
2024-11-13 10:25 |
2024-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249296
|
8.8 |
HIGH
Network
|
gabelivan
|
asset_cleanup
|
Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Spee…
|
CWE-862
Missing Authorization
|
CVE-2024-43314
|
2024-11-13 10:25 |
2024-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249297
|
9.8 |
CRITICAL
Network
|
arraytics
|
wp_timetics
|
Missing Authorization vulnerability in Arraytics Timetics allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Timetics: from n/a through 1.0.23.
|
CWE-862
Missing Authorization
|
CVE-2024-43923
|
2024-11-13 10:24 |
2024-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249298
|
8.8 |
HIGH
Network
|
beardev
|
joomsport
|
Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0.
|
CWE-862
Missing Authorization
|
CVE-2024-43355
|
2024-11-13 10:24 |
2024-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249299
|
8.8 |
HIGH
Network
|
etoilewebdesign
|
order_tracking
|
Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Order Tracking: from n/a through 3.3.12.
|
CWE-862
Missing Authorization
|
CVE-2024-43343
|
2024-11-13 10:24 |
2024-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249300
|
9.8 |
CRITICAL
Network
|
cozythemes
|
hello_agency
|
Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5.
|
CWE-862
Missing Authorization
|
CVE-2024-43341
|
2024-11-13 10:24 |
2024-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|