Vulnerabilities

TI-2024-36408 CVE-2024-54320 · GHSA-4qw4-2fxp-97xp

WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icdsoft ICDSoft Reseller Store icdsoft-reseller-store allows Reflected XSS.This issue affects ICDSoft Reseller Store:…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00436 Published 2024-12-13 No fix listed CWE-79

TI-2024-10217 CVE-2024-11028 · GHSA-pq9m-6wc9-h4hj

MultiManager WP – Manage All Your WordPress Sites Easily <= 1.0.5 - Authentication Bypass via User Impersonation

MEDIUM 51

The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01301 Published 2024-11-13 No fix listed CWE-288

Vulnerabilities

Filters

WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerability

MultiManager WP – Manage All Your WordPress Sites Easily <= 1.0.5 - Authentication Bypass via User Impersonation