Vulnerabilities

TI-2024-33963 CVE-2024-50534 · GHSA-rfxg-68vv-hjqg

WordPress World Prayer Time plugin <= 2.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in techdabang World Prayer Time world-prayer-time allows Stored XSS.This issue affects World Prayer Time: from n/a through <= 2.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00214 Published 2024-11-19 No fix listed CWE-352

TI-2024-34628 CVE-2024-51714 · GHSA-rm9j-x73f-x6h5

WordPress User Password Reset plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in techdabang User Password Reset user-password-reset allows Reflected XSS.This issue affects User Password Reset: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-11-09 No fix listed CWE-79

Vulnerabilities

Filters

WordPress World Prayer Time plugin <= 2.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

WordPress User Password Reset plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability