Saad Iqbal vulnerabilities and threats

46 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2024-49702myCred Elementor (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-10-24CVE Database V5CVE-2024-49702 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred Elementor mycred-for-elementor allows Stored XSS.This issue affects myCred Elementor: from n/a through <= 1.2.6. EPSS 0.3%Vulnerability Saad Iqbal	CVE Database V5	2024-10-24
High	8.5	EPSS 0.4%	CVE-2024-47338WPExperts Square For GiveWP (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2024-10-06CVE Database V5CVE-2024-47338 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal WPExperts Square For GiveWP wpexperts-square-for-give allows SQL Injection.This issue affects WPExperts Square For GiveWP: from n/a through <= 1.3. EPSS 0.4%Vulnerability Saad Iqbal	CVE Database V5	2024-10-06
Medium	5.3	EPSS 0.3%	CVE-2024-43214myCred (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2024-08-26CVE Database V5CVE-2024-43214 Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2. EPSS 0.3%Vulnerability Saad Iqbal	CVE Database V5	2024-08-26
Critical	9.8	EPSS 0.5%	CVE-2024-43354myCred (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2024-08-19CVE Database V5CVE-2024-43354 Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2. EPSS 0.5%Vulnerability Saad Iqbal	CVE Database V5	2024-08-19
Medium	6.5	EPSS 0.3%	CVE-2024-43353myCred (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-08-18CVE Database V5CVE-2024-43353 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2. EPSS 0.3%Vulnerability Saad Iqbal	CVE Database V5	2024-08-18
Medium	6.5	EPSS 0.3%	CVE-2024-32711myCred (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-04-24CVE Database V5CVE-2024-32711 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.6.3. EPSS 0.3%Vulnerability Saad Iqbal	CVE Database V5	2024-04-24

Page 3 of 3