Skip to content
OpenAdvisories

Vendor

UPQODE

4 known vulnerabilities.

Products

Plum: Spin Wheel & Email Pop-up 2 Whizzy 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2024-38744

    WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerability

    Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0.

    UPQODE Plum: Spin Wheel & Email Pop-up