Plugin: Theme My Login 2fa Vulnerability: 2FA Bypass via Brute ForcePatched Version: 1.2Recommended Action: Update to version 1.2, or a newer patched version Plugin: Video PopUp Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodePatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s […]
Plugin: URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress Vulnerability: Authenticated (Admin+) Stored Cross-Site ScriptingPatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s risk tolerance. It may be best to uninstall the affected software and find a replacement.
Plugin: Star CloudPRNT for WooCommerce Vulnerability: Reflected Cross-Site ScriptingPatched Version: 2.0.4Recommended Action: Update to version 2.0.4, or a newer patched version Plugin: EasyRotator for WordPress – Slider Plugin Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodePatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on
Plugin: Advance Menu Manager Vulnerability: Missing AuthorizationPatched Version: 3.0.7Recommended Action: Update to version 3.0.7, or a newer patched version Plugin: Telephone Number Linker Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodePatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s risk tolerance. It
Plugin: Advance Menu Manager Vulnerability: Missing AuthorizationPatched Version: 3.0.7Recommended Action: Update to version 3.0.7, or a newer patched version Plugin: Telephone Number Linker Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodePatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s risk tolerance. It
Plugin: Advance Menu Manager Vulnerability: Missing AuthorizationPatched Version: 3.0.7Recommended Action: Update to version 3.0.7, or a newer patched version Plugin: Telephone Number Linker Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodePatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s risk tolerance. It
Plugin: Advance Menu Manager Vulnerability: Missing AuthorizationPatched Version: 3.0.7Recommended Action: Update to version 3.0.7, or a newer patched version Plugin: Icons Font Loader Vulnerability: Authenticated (Administrator+) Arbitrary File UploadPatched Version: 1.1.3Recommended Action: Update to version 1.1.3, or a newer patched version Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor
Plugin: Advance Menu Manager Vulnerability: Missing AuthorizationPatched Version: 3.0.7Recommended Action: Update to version 3.0.7, or a newer patched version Plugin: Icons Font Loader Vulnerability: Authenticated (Administrator+) Arbitrary File UploadPatched Version: 1.1.3Recommended Action: Update to version 1.1.3, or a newer patched version Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor
Plugin: VK Filter Search Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodePatched Version: 2.3.2Recommended Action: Update to version 2.3.2, or a newer patched version Plugin: Image vertical reel scroll slideshow Vulnerability: Authenticated (Subscriber+) SQL Injection via ShortcodePatched Version: 9.1Recommended Action: Update to version 9.1, or a newer patched version Plugin: Jquery accordion slideshow Vulnerability: Authenticated
