Narinder Singh

4 results · Clear filters · Feed

• Medium 5.3
  CVE-2026-107420

  WordPress Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin <= 1.7.2 - Bypass Vulnerability vulnerability

  Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway <= 1.7.2 versions.

  Narinder Singh Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway Web / CMS
  Oct 10, 2026
• Medium 4.4
  CVE-2024-0977

  Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  The Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image URLs in the plugin's timeline widget in all versions up to, and including, 1.5.3 due to insuffic…

  Narinder Singh Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) Web / CMS
  Feb 7, 2024
• Medium 4.3
  CVE-2021-4413

  Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass

  The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on the save() function. This makes it possible for unauthenticat…

  Narinder Singh Process Steps Template Designer Web / CMS
  Jul 12, 2023
• Medium 4.3
  CVE-2020-36738

  Cool Timeline (Horizontal & Vertical Timeline) <= 2.0.2 - Cross-Site Request Forgery Bypass

  The Cool Timeline (Horizontal & Vertical Timeline) plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the ctl_save() function. This makes it possibl…

  Narinder Singh Cool Timeline (Horizontal & Vertical Timeline) Web / CMS
  Jul 1, 2023