Vulnerabilities
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-09-13 | CVE-2024-8732 | Cross-site Scripting vulnerability in Leira Roles & Capabilities The Roles & Capabilities plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.1.9. | 6.1 |
2024-09-13 | CVE-2024-8734 | Cross-site Scripting vulnerability in Lucasstad Lucas String Replace The Lucas String Replace plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.0.5. | 6.1 |
2024-09-13 | CVE-2024-8737 | Cross-site Scripting vulnerability in Kubiq PDF Thumbnail Generator The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3. | 6.1 |
2024-09-13 | CVE-2024-8747 | Cross-site Scripting vulnerability in Khromov Email Obfuscate Shortcode The Email Obfuscate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'email-obfuscate' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
2024-09-13 | CVE-2024-46044 | Out-of-bounds Write vulnerability in Tenda Ch22 Firmware 1.0.0.6(468) CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function. | 9.8 |
2024-09-13 | CVE-2024-46045 | Out-of-bounds Write vulnerability in Tenda Ch22 Firmware 1.0.0.6(468) Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function. | 9.8 |
2024-09-13 | CVE-2024-46046 | Out-of-bounds Write vulnerability in Tenda Fh451 Firmware 1.0.0.9 Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function. | 9.8 |
2024-09-13 | CVE-2024-46047 | Out-of-bounds Write vulnerability in Tenda Fh451 Firmware 1.0.0.9 Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function. | 7.5 |
2024-09-13 | CVE-2024-46048 | Command Injection vulnerability in Tenda Fh451 Firmware 1.0.0.9 Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i | 9.8 |
2024-09-13 | CVE-2024-46049 | Out-of-bounds Write vulnerability in Tenda O6 Firmware 1.0.0.7(2054) Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function. | 9.8 |