| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2023-38477 | WordPress QR code MeCard/vCard generator plugin <= 1.6.0 - Broken Access Control vulnerability | stasionok | QR code MeCard/vCard generator | Medium | 4.3 | 2024-12-13 14:23:56 | Deep Dive |
| CVE-2024-11709 | AI Post Generator | AutoWriter <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion | kekotron | AI Post Generator | AutoWriter | Medium | 4.3 | 2024-12-12 04:23:16 | Deep Dive |
| CVE-2023-49154 | WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability | Wow-Company | Button Generator – easily Button Builder | Medium | 5.3 | 2024-12-09 11:30:23 | Deep Dive |
| CVE-2024-11457 | Feedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scripting | spartac | Feedpress Generator – External RSS Frontend Customizer | Medium | 6.1 | 2024-12-07 11:09:54 | Deep Dive |
| CVE-2024-11366 | SEO Landing Page Generator <= 1.66.2 - Reflected Cross-Site Scripting | intellasoftsolutions | SEO Landing Page Generator | Medium | 6.1 | 2024-11-28 08:47:33 | Deep Dive |
| CVE-2024-11361 | PDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting | wpcodefactory | PDF Invoices & Packing Slips Generator for WooCommerce | Medium | 6.1 | 2024-11-23 04:32:23 | Deep Dive |
| CVE-2024-51641 | WordPress Advanced PDF Generator plugin <= 0.4.0 - CSRF to Stored XSS vulnerability | Juan Camilo | Advanced PDF Generator | High | 7.1 | 2024-11-19 16:32:26 | Deep Dive |
| CVE-2024-52394 | WordPress Print PDF Generator and Publisher plugin <= 1.1.6 - Stored Cross Site Scripting (XSS) vulnerability | verkkovaraani | Print PDF Generator and Publisher | Medium | 6.5 | 2024-11-18 21:26:47 | Deep Dive |
| CVE-2024-9935 | PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download | redefiningtheweb | PDF Generator for WordPress Elementor | High | 7.5 | 2024-11-16 03:20:45 | Deep Dive |
| CVE-2024-52377 | WordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.2 - Arbitrary File Upload vulnerability | bdthemes | Instant Image Generator | Critical | 10.0 | 2024-11-14 17:42:52 | Deep Dive |
| CVE-2024-10672 | Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion | themeisle | Multiple Page Generator Plugin – MPG | Low | 2.7 | 2024-11-12 03:24:58 | Deep Dive |
| CVE-2024-7424 | Multiple Page Generator Plugin – MPG <= 4.0.1 - Missing Authorization | themeisle | Multiple Page Generator Plugin – MPG | Medium | 5.4 | 2024-11-01 07:33:30 | Deep Dive |
| CVE-2024-50449 | WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability | RedefiningTheWeb | PDF Generator Addon for Elementor Page Builder | Medium | 6.5 | 2024-10-28 17:54:50 | Deep Dive |
| CVE-2024-10447 | Project Worlds Online Time Table Generator staffdashboard.php sql injection | Project Worlds | Online Time Table Generator | Medium | 6.3 | 2024-10-28 13:00:07 | Deep Dive |
| CVE-2024-10446 | Project Worlds Online Time Table Generator admindashboard.php sql injection | Project Worlds | Online Time Table Generator | Medium | 6.3 | 2024-10-28 11:31:06 | Deep Dive |
| CVE-2024-10150 | Bamazoo – Button Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dgs Shortcode | bamazoo | Bamazoo – Button Generator | Medium | 6.4 | 2024-10-25 07:37:59 | Deep Dive |
| CVE-2024-49671 | WordPress AI Postpix plugin <= 1.1.8 - Arbitrary File Upload vulnerability | Dogu Pekgoz | AI Image Generator for Your Content & Featured Images – AI Postpix | - | - | 2024-10-23 15:34:23 | Deep Dive |
| CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checks | dashlabsltd | YASR – Yet Another Star Rating Plugin for WordPress | Medium | 6.3 | 2024-10-16 06:43:30 | Deep Dive |
| CVE-2024-9265 | Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation | CodeRevolution | Echo RSS Feed Post Generator | Critical | 9.8 | 2024-10-01 08:30:18 | Deep Dive |
| CVE-2024-9241 | PDF Image Generator <= 1.5.6 - Reflected Cross-Site Scripting | fishpie | PDF Image Generator | Medium | 6.1 | 2024-10-01 08:30:13 | Deep Dive |