Threat database

51 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.3	EPSS 0.5%	CVE-2024-43328EmbedPress · Path Traversal High8.3EPSS 0.5%2024-08-19CVE Database V5CVE-2024-43328 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress allows PHP Local File Inclusion.This issue affects EmbedPress: from n/a through 4.0.9. EPSS 0.5%Vulnerability WPDeveloper #cwe-22	CVE Database V5	2024-08-19
Medium	6.5	EPSS 0.6%	CVE-2024-43129BetterDocs · Path Traversal Medium6.5EPSS 0.6%2024-08-13CVE Database V5CVE-2024-43129 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper BetterDocs allows PHP Local File Inclusion.This issue affects BetterDocs: from n/a through 3.5.8. EPSS 0.6%Vulnerability WPDeveloper #cwe-22	CVE Database V5	2024-08-13
Medium	6.5	EPSS 0.3%	CVE-2024-43227BetterDocs · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.5EPSS 0.3%2024-08-12CVE Database V5CVE-2024-43227 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper BetterDocs allows Stored XSS.This issue affects BetterDocs: from n/a through 3.5.8. EPSS 0.3%Vulnerability WPDeveloper #cwe-79	CVE Database V5	2024-08-12
Medium	6.5	EPSS 0.3%	CVE-2024-39649Essential Addons for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPDeveloper… Medium6.5EPSS 0.3%2024-08-01CVE Database V5CVE-2024-39649 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite.This issue affects Essential Addons for Elementor: from n/a through <= 5.9.26. EPSS 0.3%Vulnerability WPDeveloper	CVE Database V5	2024-08-01
Medium	6.5	EPSS 0.3%	CVE-2024-5058Typing Text · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.5EPSS 0.3%2024-06-21CVE Database V5CVE-2024-5058 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper Typing Text allows Stored XSS.This issue affects Typing Text: from n/a through 1.2.5. EPSS 0.3%Vulnerability WPDeveloper #cwe-79	CVE Database V5	2024-06-21
Medium	6.5	EPSS 0.4%	CVE-2024-31284EmbedPress · Missing Authorization Medium6.5EPSS 0.4%2024-06-09CVE Database V5CVE-2024-31284 Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.8. EPSS 0.4%Vulnerability WPDeveloper #cwe-862	CVE Database V5	2024-06-09
Medium	5.3	EPSS 0.3%	CVE-2024-31274EmbedPress · Missing Authorization Medium5.3EPSS 0.3%2024-06-09CVE Database V5CVE-2024-31274 Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11. EPSS 0.3%Vulnerability WPDeveloper #cwe-862	CVE Database V5	2024-06-09
Medium	6.5	EPSS 0.4%	CVE-2024-30467Essential Blocks for Gutenberg · Missing Authorization Medium6.5EPSS 0.4%2024-06-09CVE Database V5CVE-2024-30467 Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg.This issue affects Essential Blocks for Gutenberg: from n/a through 4.4.9. EPSS 0.4%Vulnerability WPDeveloper #cwe-862	CVE Database V5	2024-06-09
Medium	6.5	EPSS 0.6%	CVE-2024-32717SchedulePress · Missing Authorization Medium6.5EPSS 0.6%2024-05-09CVE Database V5CVE-2024-32717 Missing Authorization vulnerability in WPDeveloper SchedulePress.This issue affects SchedulePress: from n/a through 5.0.8. EPSS 0.6%Vulnerability WPDeveloper #cwe-862	CVE Database V5	2024-05-09
Medium	6.5	EPSS 0.4%	CVE-2024-31306Essential Blocks for Gutenberg · Cross-site Scripting Medium6.5EPSS 0.4%2024-04-07CVE Database V5CVE-2024-31306 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through 4.5.3. EPSS 0.4%Vulnerability WPDeveloper #cwe-79	CVE Database V5	2024-04-07
Critical	9.0	EPSS 0.9%	CVE-2024-30226BetterDocs · Deserialization of Untrusted Data Critical9.0EPSS 0.9%2024-03-28CVE Database V5CVE-2024-30226 Deserialization of Untrusted Data vulnerability in WPDeveloper BetterDocs.This issue affects BetterDocs: from n/a through 3.3.3. EPSS 0.9%Vulnerability WPDeveloper #cwe-502	CVE Database V5	2024-03-28

Showing 41–51 of 51 results