| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-27324 | PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | PDF-XChange | PDF-XChange Editor | 低危 | - | 2024-04-01 21:49:03 | Deep Dive |
| CVE-2024-27323 | PDF-XChange Editor Updater Improper Certificate Validation Remote Code Execution Vulnerability | PDF-XChange | PDF-XChange Editor | 高危 | - | 2024-04-01 21:48:50 | Deep Dive |
| CVE-2024-31091 | WordPress Custom Field Bulk Editor plugin <= 1.9.1 - Cross Site Scripting vulnerability | SparkWeb Interactive, Inc. | Custom Field Bulk Editor | High | 7.1 | 2024-03-31 19:25:20 | Deep Dive |
| CVE-2024-2794 | Gutenberg Block Editor Toolkit – EditorsKit <= 1.40.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | munirkamal | Gutenberg Block Editor Toolkit – EditorsKit | Medium | 6.4 | 2024-03-30 04:31:09 | Deep Dive |
| CVE-2024-30432 | WordPress B Slider plugin <= 1.1.12 - Cross Site Scripting (XSS) vulnerability | bPlugins | B Slider - Slider for your block editor | Medium | 6.5 | 2024-03-29 17:31:15 | Deep Dive |
| CVE-2024-30518 | WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability | ThemeLocation | Custom WooCommerce Checkout Fields Editor | Medium | 4.3 | 2024-03-29 15:54:43 | Deep Dive |
| CVE-2024-2841 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting | themeisle | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | Medium | 6.4 | 2024-03-29 04:31:34 | Deep Dive |
| CVE-2024-24700 | WordPress WP Editor plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability | Benjamin Rojas | WP Editor | High | 7.1 | 2024-03-27 05:48:28 | Deep Dive |
| CVE-2023-6091 | WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability | mndpsingh287 | Theme Editor | High | 7.2 | 2024-03-26 19:49:04 | Deep Dive |
| CVE-2024-2888 | WordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerability | BoldGrid | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | Medium | 6.5 | 2024-03-26 05:41:02 | Deep Dive |
| CVE-2024-1697 | Custom WooCommerce Checkout Fields Editor <= 1.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting | themelocation | Custom WooCommerce Checkout Fields Editor | Medium | 6.4 | 2024-03-23 01:57:40 | Deep Dive |
| CVE-2024-25591 | WordPress WP Editor plugin <=1.2.7 - Sensitive Data Exposure vulnerability | Benjamin Rojas | WP Editor | Medium | 5.3 | 2024-03-17 16:14:33 | Deep Dive |
| CVE-2024-24845 | WordPress Post Thumbnail Editor plugin <= 2.4.8 - Unauthenticated Sensitive Data Exposure vulnerability | Sewpafly | Post Thumbnail Editor | Medium | 5.3 | 2024-03-16 04:29:23 | Deep Dive |
| CVE-2024-1684 | Otter Blocks PRO <= 2.6.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSS | Themisle | Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | Medium | 6.4 | 2024-03-13 15:27:05 | Deep Dive |
| CVE-2024-1691 | Otter Blocks PRO <= 2.6.3 - Unauthenticated Stored Cross-Site Scripting via SVG Upload | Themisle | Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | Medium | 6.1 | 2024-03-13 15:26:58 | Deep Dive |
| CVE-2024-1095 | Build & Control Block Patterns – Boost up Gutenberg Editor <= 1.3.5.4 - Missing Authorization | razib_ | Build & Control Block Patterns – Boost up Gutenberg Editor | Medium | 5.3 | 2024-03-05 01:55:59 | Deep Dive |
| CVE-2024-25925 | WordPress WooCommerce Easy Checkout Field Editor, Fees & Discounts Plugin <= 3.5.12 is vulnerable to Arbitrary File Upload | SYSBASICS | WooCommerce Easy Checkout Field Editor, Fees & Discounts | Critical | 10.0 | 2024-02-26 15:09:16 | Deep Dive |
| CVE-2024-24876 | WordPress Admin Menu Editor Plugin <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF) | Janis Elsts | Admin Menu Editor | Medium | 4.3 | 2024-02-21 06:54:42 | Deep Dive |
| CVE-2024-24834 | WordPress BEAR Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS) | realmag777 | BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net | Medium | 5.9 | 2024-02-08 13:13:18 | Deep Dive |
| CVE-2024-0790 | WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Cross-Site Request Forgery | realmag777 | WOLF – WordPress Posts Bulk Editor and Manager Professional | Medium | 5.4 | 2024-02-05 21:21:47 | Deep Dive |