Vulnerabilities

TI-2024-33891 CVE-2024-50459 · GHSA-8wp6-p8r2-jh2m

WordPress AidWP plugin <= 3.2.3 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in Hossni Mubarak AidWP wp-stripe-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AidWP: from n/a through <= 3.2.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00402 Published 2024-10-29 No fix listed CWE-862

TI-2023-26151 CVE-2023-48288 · GHSA-jc8g-9q2p-m8vx

WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposure

LOW 33

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a thr…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00509 Published 2023-12-21 No fix listed CWE-200

TI-2023-13774 CVE-2023-29384 · GHSA-fc6q-f8v8-34rw

WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload

MEDIUM 52

Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01405 Published 2023-12-20 No fix listed CWE-434

TI-2023-09519 CVE-2023-23705 · GHSA-jj29-8p58-fpx7

WordPress Books Gallery Plugin <= 4.4.8 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin WordPress Books Gallery plugin <= 4.4.8 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-23 No fix listed CWE-352

TI-2022-23499 CVE-2022-47422 · GHSA-7358-prgh-r77c

Cross-site request forgery in HM Plugin Accept Stripe Donation – AidWP

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin <= 3.1.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0026 Published 2023-03-14 No fix listed CWE-352

TI-2021-06885 CVE-2021-24602 · GHSA-q963-v9w4-pqp9

HM Multiple Roles < 1.3 - Arbitrary Role Change

MEDIUM 41

The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01509 Published 2021-08-23 Fixed in 1.3 CWE-269