CVE Vulnerability Catalog

The WordPress plugin "Social Media WPCF7 Stop Words" is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.1.3. Missing or incorrect nonce validation on the smWpCfSwOptions() function allows unauthenticated attackers to update plugin settings and inject malicious scripts.

The Top Bar Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12. This is due to missing or incorrect nonce validation on the tbn_ajax_add() function. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.2.1 due to missing or incorrect nonce validation in the sh_contextual_help_dashboard_widget() function. This allows unauthenticated attackers to update plugin settings and inject malicious web scripts via a forged request if they can trick a site administrator into clicking a link.

The Associados Amazon Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.8 due to missing or incorrect nonce validation on the brzon_admin_panel() function. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into clicking a link.

The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 2.00 due to missing or incorrect nonce validation on the linkedinresume_printAdminPage() function. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into clicking a link.

The LMB^Box Smileys plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.2 due to missing or incorrect nonce validation on the manage_page() function. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into clicking a link.

The clubmember plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The Free Quotation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The Import Export For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_setting() function in all versions up to, and including, 1.6.2. This allows authenticated attackers with Subscriber-level access and above to update the plugin's record setting.

The Nari Accountant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via account settings in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with editor-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `geojsonmarker` shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The DominoKit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wp_ajax_nopriv_dominokit_option_admin_action AJAX endpoint in all versions up to, and including, 1.1.0. This allows unauthenticated attackers to update plugin settings.

The WordPress plugin "Posts Navigation Links for Sections and Headings – Free by WP Masters" is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.1. Missing or incorrect nonce validation on the 'wpm_navigation_links_settings' page allows unauthenticated attackers to update plugin settings.

The Simple User Capabilities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_nopriv_reset_capability' AJAX endpoint in all versions up to and including 1.0. This allows unauthenticated attackers to reset any user's capabilities.

The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT) All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_post_data() function in versions 2.0.7 to 2.2.6. This allows authenticated attackers with Subscriber-level access and above to create and publish arbitrary posts.

The WP Carticon plugin for WordPress (all versions up to and including 1.0.0) is vulnerable to Stored Cross-Site Scripting via the 'carticon_js_script' parameter due to insufficient input sanitization and output escaping. An authenticated attacker with administrator-level access can inject arbitrary web scripts.

The Reuse Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reuse_builder_single_post_title' shortcode in all versions up to and including 1.7 due to insufficient input sanitization and output escaping on the 'style' attribute. An authenticated attacker with Contributor-level access or higher can inject arbitrary scripts that execute when a user visits the page.

The All in One Time Clock Lite plugin for WordPress is vulnerable to unauthorized access due to a missing authorization check in all versions up to, and including, 2.0.3. The plugin exposes admin-level AJAX actions to unauthenticated users via wp_ajax_nopriv_ hooks, relying only on a nonce check without capability checks. This makes it possible for unauthenticated attackers to create published pages, create shift records with integrity issues, and download time reports containing PII (employee names and work schedules).

The Bootstrap Multi-language Responsive Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 1.0 due to insufficient input sanitization and output escaping. An authenticated attacker with administrator-level permissions or higher can inject arbitrary scripts that execute when a user visits the page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Transient DOS occurs when a remote device sends an invalid connection request during BT connectable LE scan.