Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-30 | CVE-2024-3635 | Cross-site Scripting vulnerability in Radiustheme the Post Grid The Post Grid WordPress plugin before 7.5.0 does not sanitise and escape some of its Grid settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). | 4.8 |
| 2024-09-30 | CVE-2024-8239 | Cross-site Scripting vulnerability in Squirrly Starbox The Starbox WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like the malicious user's profile or pages where the starbox shortcode is used, which may be abused by users with at least the contributor role to conduct Stored XSS attacks. | 5.4 |
| 2024-09-30 | CVE-2024-8283 | Cross-site Scripting vulnerability in 10Web Slider The Slider by 10Web WordPress plugin before 1.2.59 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). | 4.8 |
| 2024-09-30 | CVE-2024-8379 | SQL Injection vulnerability in Stylemixthemes Cost Calculator Builder The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin. | 7.2 |
| 2024-09-30 | CVE-2024-8536 | Cross-site Scripting vulnerability in Dotcamp Ultimate Blocks The Ultimate Blocks WordPress plugin before 3.2.2 does not validate and escape some of its block attributes before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks | 5.4 |
| 2024-09-29 | CVE-2024-9328 | SQL Injection vulnerability in Mayurik Advocate Office Management System 1.0 A vulnerability was found in SourceCodester Advocate Office Management System 1.0. | 9.8 |
| 2024-09-29 | CVE-2024-9327 | SQL Injection vulnerability in Code-Projects Blood Bank System 1.0 A vulnerability was found in code-projects Blood Bank System 1.0. | 9.8 |
| 2024-09-29 | CVE-2024-9325 | Untrusted Search Path vulnerability in Intelbras Incontrol web A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. | 7.8 |
| 2024-09-29 | CVE-2024-9326 | SQL Injection vulnerability in PHPgurukul Online Shopping Portal 2.0 A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. | 9.8 |
| 2024-09-29 | CVE-2024-9323 | Cross-site Scripting vulnerability in Mayurik Free and Open Source Inventory Management System 1.0 A vulnerability was found in SourceCodester Inventory Management System 1.0. | 5.4 |