| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-4377 | DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode | Unknown | DOP Shortcodes | 中危 | - | 2024-06-21 06:00:03 | Deep Dive |
| CVE-2024-5455 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion | posimyththemes | The Plus Addons for Elementor Page Builder Pro | High | 8.8 | 2024-06-21 03:24:40 | Deep Dive |
| CVE-2024-5344 | The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget | posimyththemes | The Plus Addons for Elementor Page Builder Pro | Medium | 6.1 | 2024-06-21 02:05:41 | Deep Dive |
| CVE-2024-5475 | Responsive video embed < 0.5.1 - Contributor+ Stored XSS | Unknown | Responsive video embed | - | - | 2024-06-20 06:00:04 | Deep Dive |
| CVE-2024-5522 | HTML5 Video Player < 2.5.27 - Unauthenticated SQLi | Unknown | HTML5 Video Player | - | - | 2024-06-20 06:00:04 | Deep Dive |
| CVE-2024-4565 | Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access | Unknown | Advanced Custom Fields (ACF) | - | - | 2024-06-20 06:00:03 | Deep Dive |
| CVE-2024-5172 | Expert Invoice <= 1.0.2 -Admin+ Stored XSS | Unknown | Expert Invoice | - | - | 2024-06-18 06:00:03 | Deep Dive |
| CVE-2024-4094 | Simple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS | Unknown | Simple Share Buttons Adder | - | - | 2024-06-18 06:00:02 | Deep Dive |
| CVE-2024-3276 | FooBox (Free and Premium) < 2.7.28 - Admin+ Stored XSS | Unknown | Lightbox & Modal Popup WordPress Plugin | - | - | 2024-06-18 06:00:02 | Deep Dive |
| CVE-2024-3236 | Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS | Unknown | Popup Builder | - | - | 2024-06-17 06:00:01 | Deep Dive |
| CVE-2024-4305 | PostX < 4.1.0 - Contributor+ Stored XSS | Unknown | Post Grid Gutenberg Blocks and WordPress Blog Plugin | - | - | 2024-06-17 06:00:01 | Deep Dive |
| CVE-2024-5155 | Inquiry Cart <= 3.4.2 - Stored XSS via CSRF | Unknown | Inquiry cart | - | - | 2024-06-14 06:00:05 | Deep Dive |
| CVE-2024-4271 | SVGator <= 1.2.6 - Stored XSS via SVG Upload | Unknown | SVGator | - | - | 2024-06-14 06:00:05 | Deep Dive |
| CVE-2024-4480 | WP Prayer II <= 2.4.7 - Email Settings Update via CSRF | Unknown | WP Prayer II | - | - | 2024-06-14 06:00:05 | Deep Dive |
| CVE-2024-4751 | WP Prayer II <= 2.4.7 - Settings Update via CSRF | Unknown | WP Prayer II | - | - | 2024-06-14 06:00:05 | Deep Dive |
| CVE-2024-3977 | WordPress Jitsi Shortcode <= 0.1 - Admin+ Stored XSS | Unknown | WordPress Jitsi Shortcode | - | - | 2024-06-14 06:00:04 | Deep Dive |
| CVE-2024-4270 | SVGMagic <= 1.1 - Stored XSS via SVG Upload | Unknown | SVGMagic | - | - | 2024-06-14 06:00:04 | Deep Dive |
| CVE-2024-4005 | Social Pixel <= 2.1 - Admin+ Stored XSS | Unknown | Social Pixel | - | - | 2024-06-14 06:00:04 | Deep Dive |
| CVE-2024-3992 | Amen <= 3.3.1 - Admin+ Stored XSS | Unknown | Amen | - | - | 2024-06-14 06:00:04 | Deep Dive |
| CVE-2024-3993 | AZAN Plugin <= 0.6 - Stored XSS via CSRF | Unknown | AZAN Plugin | - | - | 2024-06-14 06:00:04 | Deep Dive |