Noor Alam vulnerabilities and threats

18 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.1%	CVE-2026-57657Gmail SMTP (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2026-06-26CVE Database V5CVE-2026-57657 Unauthenticated Cross Site Request Forgery (CSRF) in Gmail SMTP <= 1.2.3.19 versions. EPSS 0.1%Vulnerability Noor Alam CWE-352	CVE Database V5	2026-06-26
High	7.5	EPSS 0.2%	CVE-2026-32538SMTP Mailer (WordPress plugin) · Insertion of Sensitive Information Into Sent Data High7.5EPSS 0.2%2026-03-25CVE Database V5CVE-2026-32538 Insertion of Sensitive Information Into Sent Data vulnerability in Noor Alam SMTP Mailer smtp-mailer allows Retrieve Embedded Sensitive Data.This issue affects SMTP Mailer: from n/a through <= 1.1.24. EPSS 0.2%Vulnerability Noor Alam	CVE Database V5	2026-03-25
Medium	6.5	EPSS 0.2%	CVE-2026-32429Magical Addons For Elementor (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-03-13CVE Database V5CVE-2026-32429 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through <= 1.4.1. EPSS 0.2%Vulnerability Noor Alam	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.2%	CVE-2026-32387Checkout for PayPal (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-03-13CVE Database V5CVE-2026-32387 Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout for PayPal: from n/a through <= 1.0.46. EPSS 0.2%Vulnerability Noor Alam	CVE Database V5	2026-03-13
Medium	5.4	EPSS 0.3%	CVE-2025-69169Easy Media Download (WordPress plugin) · Basic XSS Medium5.4EPSS 0.3%2026-01-08CVE Database V5CVE-2025-69169 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noor Alam Easy Media Download easy-media-download allows Reflection Injection.This issue affects Easy Media Download: from n/a through <= 1.1.11. EPSS 0.3%Vulnerability Noor Alam	CVE Database V5	2026-01-08
Medium	6.5	EPSS 0.2%	CVE-2025-49397Colorbox Lightbox (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-08-20CVE Database V5CVE-2025-49397 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Colorbox Lightbox wp-colorbox allows Stored XSS.This issue affects Colorbox Lightbox: from n/a through <= 1.1.5. EPSS 0.2%Vulnerability Noor Alam	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.2%	CVE-2025-54706Magical Posts Display (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-08-14CVE Database V5CVE-2025-54706 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Posts Display magical-posts-display allows DOM-Based XSS.This issue affects Magical Posts Display: from n/a through <= 1.2.52. EPSS 0.2%Vulnerability Noor Alam	CVE Database V5	2025-08-14
Medium	6.5	EPSS 0.2%	CVE-2025-26591Noor Alam WP fancybox · Cross-site Scripting Medium6.5EPSS 0.2%2025-07-04CVE Database V5CVE-2025-26591 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam WP fancybox wp-fancybox allows Stored XSS.This issue affects WP fancybox: from n/a through <= 1.0.3. EPSS 0.2%Vulnerability	CVE Database V5	2025-07-04
Medium	6.5	EPSS 0.4%	CVE-2025-39572Checkout for PayPal (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2025-04-16CVE Database V5CVE-2025-39572 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Stored XSS.This issue affects Checkout for PayPal: from n/a through <= 1.0.38. EPSS 0.4%Vulnerability Noor Alam	CVE Database V5	2025-04-16
Medium	6.5	EPSS 0.4%	CVE-2025-31844Magical Blocks (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2025-04-01CVE Database V5CVE-2025-31844 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Blocks magical-blocks allows Stored XSS.This issue affects Magical Blocks: from n/a through <= 1.0.12. EPSS 0.4%Vulnerability Noor Alam	CVE Database V5	2025-04-01
Medium	6.5	EPSS 0.3%	CVE-2024-54212Magical Addons For Elementor (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-12-06CVE Database V5CVE-2024-54212 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through <= 1.3.6. EPSS 0.3%Vulnerability Noor Alam	CVE Database V5	2024-12-06
Medium	6.5	EPSS 0.3%	CVE-2024-51892Sell Media File with Stripe (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-11-19CVE Database V5CVE-2024-51892 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Sell Media File with Stripe sell-media-file allows Stored XSS.This issue affects Sell Media File with Stripe: from n/a through <= 1.0.6. EPSS 0.3%Vulnerability Noor Alam	CVE Database V5	2024-11-19
Medium	4.9	EPSS 0.6%	CVE-2024-51665Magical Addons For Elementor (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.6%2024-11-04CVE Database V5CVE-2024-51665 Server-Side Request Forgery (SSRF) vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Server Side Request Forgery.This issue affects Magical Addons For Elementor: from n/a through <= 1.2.1. EPSS 0.6%Vulnerability Noor Alam	CVE Database V5	2024-11-04
Medium	4.3	EPSS 0.2%	CVE-2024-49627Noor Alam WordPress Image SEO · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-10-20CVE Database V5CVE-2024-49627 Cross-Site Request Forgery (CSRF) vulnerability in Noor Alam WordPress Image SEO allows Cross Site Request Forgery.This issue affects WordPress Image SEO: from n/a through 1.1.4. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-10-20
Medium	4.9	EPSS 0.2%	CVE-2024-38730Magical Addons For Elementor (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.2%2024-07-22CVE Database V5CVE-2024-38730 Server-Side Request Forgery (SSRF) vulnerability in Noor alam Magical Addons For Elementor.This issue affects Magical Addons For Elementor: from n/a through 1.1.41. EPSS 0.2%Vulnerability Noor alam CWE-918	CVE Database V5	2024-07-22
Medium	6.5	EPSS 0.3%	CVE-2024-37951Magical Posts Display (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-07-20CVE Database V5CVE-2024-37951 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Noor alam Magical Posts Display – Elementor & Gutenberg Posts Blocks allows Stored XSS.This issue affects Magical Posts Display – Elementor & Gutenberg Posts Blocks: from n/a through 1.2.38. EPSS 0.3%Vulnerability Noor alam CWE-79	CVE Database V5	2024-07-20
Medium	6.5	EPSS 0.3%	CVE-2024-38681Magical Addons For Elementor (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-07-20CVE Database V5CVE-2024-38681 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through 1.1.41. EPSS 0.3%Vulnerability Noor alam CWE-79	CVE Database V5	2024-07-20
Medium	6.5	EPSS 0.3%	CVE-2024-34547Magical Addons For Elementor (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-05-08CVE Database V5CVE-2024-34547 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through 1.1.34. EPSS 0.3%Vulnerability Noor alam CWE-79	CVE Database V5	2024-05-08

Page 1 of 1