Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2021-24442 - Questionnaire And Voting System Plugin
The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks
PLUGIN
Questionnaire And Voting System
CVE-2021-24442
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-34624 - Profilepress Plugin
A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3. .
PLUGIN
Profilepress
CVE-2021-34624
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-34623 - Profilepress Plugin
A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3. .
PLUGIN
Profilepress
CVE-2021-34623
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-34622 - Profilepress Plugin
A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the ProfilePress WordPress plugin made it possible for users to escalate their privileges to that of an administrator while editing their profile. This issue affects versions 3.0.0 - 3.1.3. .
PLUGIN
Profilepress
CVE-2021-34622
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-34621 - Profilepress Plugin
A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. .
PLUGIN
Profilepress
CVE-2021-34621
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24384 - Load Ajax Action Of The Joomsport Plugin
The joomsport_md_load AJAX action of the JoomSport WordPress plugin before 5.1.8, registered for both unauthenticated and unauthenticated users, unserialised user input from the shattr POST parameter, leading to a PHP Object Injection issue. Even though the plugin does not have a suitable gadget chain to exploit this, other installed plugins could, which might lead to more severe issues such as RCE
PLUGIN
Load Ajax Action Of The Joomsport
CVE-2021-24384
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24375 - View Ajax Handlers Of The Motor Theme
Lack of authentication or validation in motor_load_more, motor_gallery_load_more, motor_quick_view and motor_project_quick_view AJAX handlers of the Motor WordPress theme before 3.1.0 allows an unauthenticated attacker access to arbitrary files in the server file system, and to execute arbitrary php scripts found on the server file system. We found no vulnerability for uploading files with this theme, so any scripts to be executed must already be on the server file system.
THEME
View Ajax Handlers Of The Motor
CVE-2021-24375
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24376 - Before 2 Plugin
The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archive via the "Import Settings" feature, after its extraction. However, the extracted folders are not checked and it is possible to upload a zip which contained a directory with PHP file in it and then it is not removed from the disk. It is a bypass of CVE-2020-24948 which allows sending a PHP file via the "Import Settings" functionality to achieve Remote Code Execution.
PLUGIN
Before 2
CVE-2021-24376
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24370 - Fancy Product Designer Plugin
The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution.
PLUGIN
Fancy Product Designer
CVE-2021-24370
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24361 - In The Location Manager Plugin
In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues.
PLUGIN
In The Location Manager
CVE-2021-24361
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-29504 - Wp Cli Plugin
WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communication to remotely disable the certificate verification on WP-CLI side, gaining full control over the communication content, including the ability to impersonate update servers and push malicious updates towards WordPress instances controlled by the vulnerable WP-CLI agent, or push malicious updates toward WP-CLI itself. The vulnerability stems from the fact that the default behavior of `WP_CLI\Utils\http_request()` when encountering a TLS handshake error…
PLUGIN
Wp Cli
CVE-2021-29504
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24321 - Before 1 Theme
The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the bt_bb_listing_field_price_range_to, bt_bb_listing_field_now_open, bt_bb_listing_field_my_lng, listing_list_view and bt_bb_listing_field_my_lat parameters before using them in a SQL statement, leading to SQL Injection issues
THEME
Before 1
CVE-2021-24321
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24314 - Before 2 Theme
The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue
THEME
Before 2
CVE-2021-24314
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24285 - Cars Seller Auto Classifieds Script Plugin
The request_list_request AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the order_id POST parameter before using it in a SQL statement, leading to a SQL Injection issue.
PLUGIN
Cars Seller Auto Classifieds Script
CVE-2021-24285
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24284 - Kaswara Plugin
The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files such as PHP.
PLUGIN
Kaswara
CVE-2021-24284
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24236 - Imagements Plugin
The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.
PLUGIN
Imagements
CVE-2021-24236
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24240 - Business Hours Pro Plugin
The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.
PLUGIN
Business Hours Pro
CVE-2021-24240
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24229 - Level Ajax Action Of The Patreon Plugin
The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX action of the Patreon WordPress plugin before 1.7.2. This AJAX hook is used to update the pledge level required by Patreon subscribers to access a given attachment. This action is accessible for user accounts with the ‘manage_options’ privilege (i.e.., only administrators). Unfortunately, one of the parameters used in this AJAX endpoint is not sanitized before being printed back to the user, so the risk it represents is the same as the previous XSS vulnerability.
PLUGIN
Level Ajax Action Of The Patreon
CVE-2021-24229
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24228 - Team Identified A Reflected Cross Site Scripting In The Login Form Of The Patreon Plugin
The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. The WordPress login form (wp-login.php) is hooked by the plugin and offers to allow users to authenticate on the site using their Patreon account. Unfortunately, some of the error logging logic behind the scene allowed user-controlled input to be reflected on the login page, unsanitized.
PLUGIN
Team Identified A Reflected Cross Site Scripting In The Login Form Of The Patreon
CVE-2021-24228
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24223 - N5 Upload Form Plugin
The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), however, in the case of misconfigured servers with Directory listing enabled, accessing it is trivial.
PLUGIN
N5 Upload Form
CVE-2021-24223
Risk Score