TI-2024-25977 CVE-2024-38743 · GHSA-fv65-j2g7-x89x
WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerability
Priority LOW 30
Access Control vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows .
Vulnerabilities
4 records
TI-2024-25978 CVE-2024-38744 · GHSA-jf3q-9x2q-r3hj
WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerability
Priority MEDIUM 42
Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This issue affects Plum: Spin Wheel & Email Pop-up: from n/a throu…
TI-2024-20268 CVE-2024-30544 · GHSA-jjpc-9gcp-fgx5
WordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerability
Priority MEDIUM 48
Missing Authorization vulnerability in UPQODE Whizzy.This issue affects Whizzy: from n/a through 1.1.18.
TI-2024-20267 CVE-2024-30543 · GHSA-x8p6-mr22-v5c9
WordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerability
Priority LOW 35
Authorization Bypass Through User-Controlled Key vulnerability in UPQODE Whizz.This issue affects Whizzy: from n/a through 1.1.18.