v.26.4.2314

High Severity Vulnerabilities

Found 13297 vulnerabilities at High severity.

Vulnerability Name

CVE

CWE

Severity

WordPress Plugin WPCafe-Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce Local File Inclusion (2.2.25)

CVE-2024-5431

CWE-22

High

WordPress Plugin WPCafe-Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce Security Bypass (2.2.22)

CVE-2023-47805

CWE-862

High

WordPress Plugin WPCafe-Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce Server-Side Request Forgery (2.2.23)

CVE-2024-1855

CWE-918

High

WordPress Plugin WPCOM Member Malicious Code (1.3.16)

CVE-2024-6297

CWE-506

High

WordPress Plugin Zita Elementor Site Library Arbitrary File Upload (1.6.1)

CVE-2024-37420

CWE-434

High

WordPress Plugin Flipbox Builder PHP Object Injection (1.5)

CVE-2024-6152

CWE-915

High

WordPress Plugin Great Restaurant Menu WP SQL Injection (1.4.1)

CVE-2024-38793

CWE-89

High

WordPress Plugin Grow by Tradedoubler-Advertiser for WooCommerce Local File Inclusion (2.0.21)

CVE-2024-6460

CWE-22

High

WordPress Plugin LearnPress-WordPress LMS Local File Inclusion (4.2.6.8.2)

CVE-2024-6589

CWE-22

High

WordPress Plugin ListingPro Local File Inclusion (2.9.3)

CVE-2024-39619

CWE-22

High

WordPress Plugin ListingPro SQL Injection (2.9.3)

CVE-2024-38795

CWE-89

High

WordPress Plugin MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles Arbitrary File Deletion (1.9.2)

CVE-2024-6885

CWE-73

High

WordPress Plugin Media.net Ads Manager Arbitrary File Upload (2.10.13)

CVE-2024-6431

CWE-434

High

WordPress Plugin News Element Elementor Blog Magazine Local File Inclusion (1.0.5)

CVE-2024-6459

CWE-22

High

WordPress Plugin PowerPack for Beaver Builder Privilege Escalation (2.33.0)

CVE-2024-39633

CWE-269

High

WordPress Plugin PowerPack Pro for Elementor Privilege Escalation (2.10.14)

CVE-2024-39634

CWE-269

High

WordPress Plugin Redux Framework Cross-Site Scripting (4.4.17)

CVE-2024-6828

CWE-79

High

WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Arbitrary File Upload (5.3.14)

CVE-2024-6756

CWE-434

High

WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Cross-Site Scripting (5.3.14)

CVE-2024-6753

CWE-79

High

WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Security Bypass (5.3.14)

CVE-2024-6750

CWE-862

High

WordPress Plugin WooCommerce PDF Vouchers-Ultimate Gift Cards Security Bypass (4.9.3)

CVE-2024-7027

CWE-863

High

WordPress Plugin WooCommerce PDF Vouchers-Ultimate Gift Cards Unspecified Vulnerability (4.9.4)

-

-

High