Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2021-24499 - Before 2 Theme
The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to the uploads/workreap-temp directory. Uploaded files were neither sanitized nor validated, allowing an unauthenticated visitor to upload executable code such as php scripts.
THEME
Before 2
CVE-2021-24499
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24501 - Before 2 Theme
The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as modifying or deleting objects. This allowed a logged in user to modify or delete objects belonging to other users on the site.
THEME
Before 2
CVE-2021-24501
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24500 - Before 2 Theme
Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing insecure direct object references that were not validated. This allows an attacker to trick a logged in user to submit a POST request to the vulnerable site, potentially modifying or deleting arbitrary objects on the target site.
THEME
Before 2
CVE-2021-24500
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24509 - Before 2 Plugin
The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks. A post made by a contributor would still have to be approved by an admin to have the XSS triggered in the frontend, however, higher privilege users, such as editor could exploit this without the need of approval, and even when the blog disallows the unfiltered_html capability.
PLUGIN
Before 2
CVE-2021-24509
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24503 - Before 2 Plugin
The Popular Brand Icons – Simple Icons WordPress plugin before 2.7.8 does not sanitise or validate some of its shortcode parameters, such as "color", "size" or "class", allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still have to be approved by an admin to have the XSS triggered in the frontend, however, higher privilege users, such as editor could exploit this without the need of approval, and even when the blog disallows the unfiltered_html capability.
PLUGIN
Before 2
CVE-2021-24503
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24472 - Before 2 Plugin
The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will have the web server fetch and display the content from any URI, this would allow for SSRF (Server Side Request Forgery) and RFI (Remote File Inclusion) vulnerabilities on the website.
PLUGIN
Before 2
CVE-2021-24472
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24492 - Before 2 Plugin
The hndtst_action_instance_callback AJAX call of the Handsome Testimonials & Reviews WordPress plugin before 2.1.1, available to any authenticated users, does not sanitise, validate or escape the hndtst_previewShortcodeInstanceId POST parameter before using it in a SQL statement, leading to an SQL Injection issue.
PLUGIN
Before 2
CVE-2021-24492
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24484 - Before 2 Plugin
The get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
PLUGIN
Before 2
CVE-2021-24484
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24488 - Before 2 Plugin
The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues
PLUGIN
Before 2
CVE-2021-24488
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24473 - Before 2 Plugin
The User Profile Picture WordPress plugin before 2.6.0 was affected by an IDOR issue, allowing users with the upload_image capability (by default author and above) to change and delete the profile pictures of other users (including those with higher roles).
PLUGIN
Before 2
CVE-2021-24473
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24463 - Before 2 Plugin
The get_sliders() function in the Image Slider by Ays- Responsive Slider and Carousel WordPress plugin before 2.5.0 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
PLUGIN
Before 2
CVE-2021-24463
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24458 - Before 2 Plugin
The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
PLUGIN
Before 2
CVE-2021-24458
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24464 - Before 2 Plugin
The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributor, leading to an authenticated Stored Cross-Site Scripting issue.
PLUGIN
Before 2
CVE-2021-24464
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24425 - Before 2 Plugin
The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use malicious JavaScript in it, leading to a Stored Cross-Site Scripting issue, which will be triggered in the plugin's setting, as well as all front-page of the blog (when the Welcome bar is active)
PLUGIN
Before 2
CVE-2021-24425
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24452 - Before 2 Plugin
The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the "extension" parameter in the Extensions dashboard, when the 'Anonymously track usage to improve product quality' setting is enabled, as the parameter is output in a JavaScript context without proper escaping. This could allow an attacker, who can convince an authenticated admin into clicking a link, to run malicious JavaScript within the user's web browser, which could lead to full site compromise.
PLUGIN
Before 2
CVE-2021-24452
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24436 - Before 2 Plugin
The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulnerability within the "extension" parameter in the Extensions dashboard, which is output in an attribute without being escaped first. This could allow an attacker, who can convince an authenticated admin into clicking a link, to run malicious JavaScript within the user's web browser, which could lead to full site compromise.
PLUGIN
Before 2
CVE-2021-24436
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24420 - Before 2 Plugin
The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the 'All Quotes" table.
PLUGIN
Before 2
CVE-2021-24420
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24427 - Before 2 Plugin
The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output in the page, leading to an authenticated Stored Cross-Site Scripting issue
PLUGIN
Before 2
CVE-2021-24427
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24409 - Before 2 Plugin
The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator
PLUGIN
Before 2
CVE-2021-24409
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24408 - Before 2 Plugin
The Prismatic WordPress plugin before 2.8 does not sanitise or validate some of its shortcode parameters, allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still have to be approved by an admin to have the XSS trigger able in the frontend, however, higher privilege users, such as editor could exploit this without the need of approval, and even when the blog disallows the unfiltered_html capability.
PLUGIN
Before 2
CVE-2021-24408
Risk Score