drop

2024

Critical

High

Medium

Low

Global Rank

#359

of 3,213 researchers

Vulns

12

Critical0

High3

Medium9

Low0

Affected Assets

9

9plugins

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

12 records


2024-10-14 17:07	WooCommerce <= 9.0.2 - Unauthenticated HTML Injection WooCommerce <= 9.0.2	`CVE-2024-9944`	5.3 Medium	drop	Yes
2024-04-04 00:00	LearnPress <= 4.2.6.3 - Insecure Direct Object Reference LearnPress <= 4.2.6.3	`CVE-2024-1289`	6.5 Medium	drop	Yes
2024-04-04 00:00	LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting LearnPress <= 4.2.6.3	`CVE-2024-1463`	4.4 Medium	drop	Yes
2024-03-12 00:00	weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer weForms <= 1.6.21	`CVE-2024-0386`	7.2 High	drop	Yes
2024-03-05 00:00	Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Fluent Forms <= 5.1.9	`CVE-2023-6957`	4.9 Medium	drop	Yes
2024-02-20 00:00	Tutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&A Tutor LMS <= 2.6.0	`CVE-2024-1128`	5.4 Medium	drop	Yes
2024-02-20 00:00	Tutor LMS <= 2.6.0 - Missing Authorization Tutor LMS <= 2.6.0	`CVE-2024-1133`	4.3 Medium	drop	Yes
2024-01-22 00:00	PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting Fluent PDF Generator <= 1.1.7	`CVE-2023-6953`	4.9 Medium	drop	Yes
2024-01-19 00:00	WPForms Pro 1.8.4 - 1.8.5.3 - Unauthenticated Stored Cross-Site Scripting via Form Submission WPForms Pro 1.8.4 – 1.8.5.3	`CVE-2023-7063`	7.2 High	drop	Yes
2024-01-08 00:00	Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting Formidable Forms <= 6.7	`CVE-2023-6842`	4.4 Medium	drop	Yes

Showing 1–10 of 12 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C