Skip to main content

5Starplugins

3 CVEs vendor

Monthly

CVE-2024-13362 May 01, 05:29 MEDIUM This Month

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai Wpbits Addons For Elementor Page Builder Unlimited Elements For Elementor +166
NVD
CVSS 3.1
6.1
EPSS
0.1%
CVE-2024-39626 Aug 01, 23:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rob @ 5 Star Plugins Pretty Simple Popup Builder pretty-simple-popup-builder allows Stored. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Pretty Simple Popup Builder Wordpress Plugin 5Starplugins
NVD VulDB
CVSS 3.1
5.9
EPSS
0.2%
CVE-2024-35757 Jun 21, 13:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in 5 Star Plugins Easy Age Verify allows Stored XSS.8.2. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Easy Age Verify 5Starplugins
NVD
CVSS 3.1
4.8
EPSS
0.3%
EPSS 0% CVSS 6.1
MEDIUM This Month

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai +168
NVD
EPSS 0% CVSS 5.9
MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rob @ 5 Star Plugins Pretty Simple Popup Builder pretty-simple-popup-builder allows Stored. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Pretty Simple Popup Builder +2
NVD VulDB
EPSS 0% CVSS 4.8
MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in 5 Star Plugins Easy Age Verify allows Stored XSS.8.2. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Easy Age Verify 5Starplugins
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy