Dwbooster vulnerabilities, page 2

24 vulnerabilities

Known vulnerabilities in Dwbooster products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.

6.5CVE-2024-13758codepeoplecp_contact_form_with_paypal+2
EPSS score
0.27%
The CP Contact Form with PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.52. This is due to missing or incorrect nonce validation on the cp_contact_form_paypal_check_init_actions() function. This makes it possible for unauthenticated attackers to add discount codes via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.6.1CVE-2019-13505dwboosterappointment_hour_booking+1
EPSS score
1.38%
The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1.8.8CVE-2023-41732codepeoplecp blocks+2
EPSS score
0.24%
Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Blocks plugin <= 1.0.20 versions.4.8CVE-2023-6446codepeoplecalculated_fields_form+2
EPSS score
0.30%
The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.40 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.