Pagina 2 – Azienda Sicura

Lista CVE 2024/48xxx

CVE-2024-48032 (WordPress Featured Posts with Multiple Custom Groups (FPMCG) plugin <= 4.0 - Cross-Site Request Forgery (CSRF) vulnerability)

CVE-2024-48033 (WordPress Featured Posts with Multiple Custom Groups (FPMCG) plugin <= 4.0 - Reflected Cross Site Scripting (XSS) vulnerability)

CVE-2024-48034 (WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerability)

CVE-2024-48035 (WordPress Creates 3D Flipbook, PDF Flipbook plugin <= 1.2 - Arbitrary File Upload vulnerability)

CVE-2024-48036 (WordPress ACF Images Search And Insert plugin <= 1.1.4 - Arbitrary File Upload vulnerability)

CVE-2024-48037 (WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-48038 (WordPress Contact Form Widget – Contact Query, Contact Page, Form Maker, Query Table plugin <= 1.4.2 - CSRF vulnerability)

CVE-2024-48039 (WordPress wp-Monalisa plugin <= 6.4 - Cross Site Request Forgery (CSRF) vulnerability)

CVE-2024-48040 (WordPress CubeWP – All-in-One Dynamic Content Framework plugin <= 1.1.15 - Broken Access Control vulnerability)

CVE-2024-48041 (WordPress Tainacan plugin <= 0.21.8 - SQL Injection vulnerability)

CVE-2024-48042 (WordPress CM Tooltip Glossary plugin <= 4.3.9 - Stored Cross-Site Scripting vulnerability)

CVE-2024-48043 (WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability)

CVE-2024-48044 (WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerability)

CVE-2024-48045 (WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - Broken Access Control vulnerability)

CVE-2024-48046 (WordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerability)

CVE-2024-48047 (WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability)

CVE-2024-48048 (WordPress Linked Variation for WooCommerce plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability)

CVE-2024-48049 (WordPress Wsify Widget plugin <= 1.0 - CSRF to Stored XSS vulnerability)

CVE-2024-48050 (WordPress Mighty Builder plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability)