CyberSecBulletin

Wpvncom vulnerabilities

We track 2 vulnerabilities in Wpvncom products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2024.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest Wpvncom vulnerabilities

  • 7.4 High severity

    UX Flat: Improper Neutralization of Input During Web Page Generation

    CVE-2024-2459Wpvncom

    The UX Flat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it po

  • 8.8 High severity

    WP EXtra – One Click Optimize: Missing Authorization

    CVE-2023-5311WpvncomEPSS 1.85%

    The WP EXtra plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the register() function in versions up to, and including, 6.2. This makes it possible for authenticated attackers, with subscriber-level p