Azienda Sicura

Lista CVE 2024/44xxx

CVE-2024-44001 (WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability)

CVE-2024-44002 (WordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44003 (WordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-44004 (WordPress Spice Starter Sites plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44005 (WordPress WPCargo Track & Trace plugin <= 7.0.6 - SQL Injection vulnerability)

CVE-2024-44006 (WordPress Greenshift – animation and page builder blocks plugin <= 9.3.7 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44007 (WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerability)

CVE-2024-44008 (WordPress SKT Templates – Elementor & Gutenberg templates plugin <= 6.14 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-44009 (WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44010 (WordPress WCFM Marketplace <= 3.6.10 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-44011 (WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44012 (WordPress WP Ticket Ultra plugin <= 1.0.5 - Local File Inclusion vulnerability)

CVE-2024-44013 (WordPress WP Newsletter Subscription plugin <= 1.1 - Local File Inclusion vulnerability)

CVE-2024-44014 (WordPress VR Calendar plugin <= 2.4.0 - Local File Inclusion vulnerability)

CVE-2024-44015 (WordPress Vmax Project Manager plugin <= 1.0 - Local File Inclusion to RCE vulnerability)

CVE-2024-44016 (WordPress Users Control plugin <= 1.0.16 - Local File Inclusion vulnerability)

CVE-2024-44017 (WordPress Podiant plugin <= 1.1 - Local File Inclusion vulnerability)

CVE-2024-44018 (WordPress MH Board plugin <= 1.3.2.1 - Local File Inclusion vulnerability)

CVE-2024-44019 (WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability)