labibahmed42

8 results · Clear filters · Feed

• Medium 6.4
  CVE-2024-13751

  3D Photo Gallery <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

  The 3D Photo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'des[]' parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated att…

  labibahmed42 3D Photo Gallery Web / CMS
  Feb 21, 2025
• Medium 6.4
  CVE-2024-13591

  Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  The Team Builder For WPBakery Page Builder(Formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'team-builder-vc' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitizatio…

  labibahmed42 Team Builder For WPBakery Page Builder(Formerly Visual Composer) Web / CMS
  Feb 19, 2025
• Medium 6.4
  CVE-2024-13582

  Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  The Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wdo_simple_pricing_table_free' shortcode in all versions up to, and including, 1.0 due to insuffi…

  labibahmed42 Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) Web / CMS
  Feb 18, 2025
• Medium 4.3
  CVE-2024-13687

  Team Builder – Meet the Team <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update

  The Team Builder – Meet the Team plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_team_builder_options() function in all versions up to, and including, 1.3. This makes it possible for authen…

  labibahmed42 Team Builder – Meet the Team Web / CMS
  Feb 18, 2025
• Medium 6.4
  CVE-2024-10175

  Pricing Tables For WPBakery Page Builder (formerly Visual Composer) <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wdo_pricing_tables Shortcode

  The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wdo_pricing_tables shortcode in all versions up to, and including, 1.4 due to insufficient input sanitiz…

  labibahmed42 Pricing Tables For WPBakery Page Builder (formerly Visual Composer) Web / CMS
  Nov 27, 2024
• Medium 6.4
  CVE-2021-4378

  WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with minimal p…

  labibahmed42 WP Quick FrontEnd Editor – WordPress Plugin Web / CMS
  Jun 7, 2023
• Medium 4.3
  CVE-2021-4371

  WP Quick FrontEnd Editor <= 5.5 - Authenticated Settings Change

  The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Setting Changs in versions up to, and including, 5.5. This is due to lacking both a security nonce and a capabilities check. This makes it possible for low-authenticated attackers to change pl…

  labibahmed42 WP Quick FrontEnd Editor – WordPress Plugin Web / CMS
  Jun 7, 2023
• Medium 6.1
  CVE-2021-4363

  WP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site Scripting

  The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 5.5 due to insufficient input sanitization and output escaping on the 'save_content_front' function that uses print_r on the us…

  labibahmed42 WP Quick FrontEnd Editor – WordPress Plugin Web / CMS
  Jun 7, 2023