Leo

2024

Critical

High

Medium

Low

Global Rank

#670

of 3,213 researchers

Vulns

5

Critical1

High2

Medium2

Low0

Affected Assets

4

4plugins

Avg CVSS

7.4

Average score of vulnerabilities

Researcher Submissions

5 records


2024-11-22 00:00	FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection FluentSMTP <= 2.2.82	`CVE-2024-9511`	9.8 Critical	Leo	Yes
2024-10-04 00:00	Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete Rank Math SEO <= 1.0.228	`CVE-2024-9161`	6.5 Medium	Leo	Yes
2024-10-04 00:00	Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection Rank Math SEO <= 1.0.228	`CVE-2024-9314`	7.2 High	Leo	Yes
2024-10-03 00:00	Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Code Embed <= 2.4	`CVE-2024-8804`	6.4 Medium	Leo	Yes
2024-09-26 17:03	GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter GiveWP <= 3.16.1	`CVE-2024-9130`	7.2 High	Leo	Yes

Showing 1–5 of 5 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C