Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2024-11-01 CVE-2024-44020 Missing Authorization vulnerability in Prasadkirpekar WP Free SSL
Missing Authorization vulnerability in Prasad Kirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS allows . This issue affects WP Free SSL – Free SSL Certificate for WordPress and force HTTPS: from n/a through 1.2.6.
network
low complexity
prasadkirpekar CWE-862
8.8
2024-11-01 CVE-2024-44021 Missing Authorization vulnerability in Truepush
Missing Authorization vulnerability in Truepush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Truepush: from n/a through 1.0.8.
network
low complexity
truepush CWE-862
8.8
2024-11-01 CVE-2024-44031 Missing Authorization vulnerability in Beardev Joomsport
Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.6.3.
network
low complexity
beardev CWE-862
8.8
2024-11-01 CVE-2024-44038 Missing Authorization vulnerability in Sunshinephotocart Sunshine Photo Cart
Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.2.9.
network
low complexity
sunshinephotocart CWE-862
critical
9.8
2024-11-01 CVE-2024-44052 Missing Authorization vulnerability in Helloasso
Missing Authorization vulnerability in HelloAsso allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HelloAsso: from n/a through 1.1.10.
network
low complexity
helloasso CWE-862
8.8
2024-11-01 CVE-2024-47302 Missing Authorization vulnerability in Wpmanageninja Fluent Support
Missing Authorization vulnerability in WPManageNinja LLC Fluent Support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through 1.8.0.
network
low complexity
wpmanageninja CWE-862
critical
9.8
2024-11-01 CVE-2024-47308 Missing Authorization vulnerability in Templately
Missing Authorization vulnerability in Templately allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Templately: from n/a through 3.1.2.
network
low complexity
templately CWE-862
critical
9.8
2024-11-01 CVE-2024-47311 Missing Authorization vulnerability in Kraftplugins Wheel of Life
Missing Authorization vulnerability in Kraft Plugins Wheel of Life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through 1.1.8.
network
low complexity
kraftplugins CWE-862
critical
9.8
2024-11-01 CVE-2024-47314 Missing Authorization vulnerability in Sunshinephotocart Sunshine Photo Cart
Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.2.8.
network
low complexity
sunshinephotocart CWE-862
8.8
2024-11-01 CVE-2024-47317 Missing Authorization vulnerability in Wpquads ADS
Missing Authorization vulnerability in WP Quads Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads: from n/a through 2.0.84.
network
low complexity
wpquads CWE-862
8.8