Archive

9 April 2024

Vulnerabilities first published on this day (UTC), newest first.

← March 2024 2024 / April /9 May 2024 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.3

CVE-2024-0588 Public exploit

Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery

The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.10. This is due to missing nonce validation on the pmpro_lifter…

Stranger Studios Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions Web / CMS

Apr 9, 2024
Medium 5.4

CVE-2024-27665 Public exploit

Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XSS) via file upload feature in Syllabus module.

Apr 9, 2024