Lista CVE 2024/44xxx

CVE nel gruppo: 44xxx

CVE-2024-44020 (N/A)

CVE-2024-44021 (WordPress WP Free SSL plugin <= 1.2.6 - Broken Access Control vulnerability)

CVE-2024-44022 (WordPress Truepush plugin <= 1.0.8 - Broken Access Control vulnerability)

CVE-2024-44023 (WordPress Review & testimonial widgets plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44024 (WordPress ABCApp Creator plugin <= 1.1.2 - Local File Inclusion vulnerability)

CVE-2024-44025 (WordPress Medical Addon for Elementor plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44026 (WordPress NiceJob plugin < 3.6.5 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44027 (WordPress Charity Addon for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44028 (WordPress Gum Elementor Addon plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44029 (WordPress NiceJob plugin < 3.6.5 - CSRF to Stored Cross Site Scripting (XSS) vulnerability)

CVE-2024-44030 (WordPress Viala theme <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-44031 (WordPress Checkout Mestres WP plugin <= 8.6 - Local File Inclusion vulnerability)

CVE-2024-44032 (WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability)

CVE-2024-44033 (WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44034 (WordPress Primary Addon for Elementor plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44035 (WordPress WPSPX plugin <= 1.0.2 - Local File Inclusion vulnerability)

CVE-2024-44036 (WordPress Gum Elementor Addon plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44037 (WordPress Kodex Posts likes plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44038 (WordPress Multipurpose Ticket Booking Manager plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44039 (WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability)

CVE-2024-44040 (WordPress WP Travel – Ultimate Travel Booking System, Tour Management Engine plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44041 (WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44042 (WordPress IdeaPush plugin <= 8.66 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44043 (WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44044 (WordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44045 (WordPress Oshine Modules plugin < 3.3.8 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-44046 (WordPress WP Abstracts plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44047 (WordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44048 (WordPress IMPress for IDX Broker plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44049 (WordPress Product Carousel Slider & Grid Ultimate for WooCommerce plugin <= 1.9.10 - Authenticated Local File Inclusion vulnerability)

CVE-2024-44050 (WordPress Gutenberg Blocks – Unlimited blocks For Gutenberg plugin <= 1.2.7 - Authenticated Cross Site Scripting (XSS) vulnerability)

CVE-2024-44051 (WordPress Verbosa theme <= 1.2.3 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44052 (WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44053 (WordPress HelloAsso plugin <= 1.1.10 - Broken Access Control vulnerability)

CVE-2024-44054 (WordPress Opor Ayam theme <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-44055 (WordPress Fluida theme <= 1.8.8 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44056 (WordPress Oshine Modules plugin < 3.3.6 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability)

CVE-2024-44057 (WordPress Mantra theme <= 3.3.2 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44058 (WordPress Nirvana theme <= 1.6.3 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-44059 (WordPress Parabola theme <= 2.4.1 - Cross Site Scripting (XSS) vulnerability)