Hmplugin vulnerabilities
6 vulnerabilities
Known vulnerabilities in Hmplugin products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Jobwp2 vulnerabilities
- Accept Stripe Donation Aidwp1 vulnerabilities
- Aidwp1 vulnerabilities
- Hm Multiple Roles1 vulnerabilities
- Wordpress Books Gallery1 vulnerabilities
CVE-2021-24602hmpluginhm_multiple_roles+2
EPSS score1.51%
The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile pageCVE-2022-47422hm pluginaccept stripe donation – aidwp+2EPSS score0.26%
Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin <= 3.1.5 versions.CVE-2024-50459hmpluginaidwp+2EPSS score0.40%
Missing Authorization vulnerability in Hossni Mubarak AidWP wp-stripe-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AidWP: from n/a through <= 3.2.3.CVE-2023-48288hm pluginwordpress job board and recruitment plugin – jobwp+2EPSS score0.51%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.1.CVE-2023-29384hm pluginwordpress job board and recruitment plugin – jobwp+2EPSS score1.41%
Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0.CVE-2023-23705hm pluginwordpress books gallery+2EPSS score0.26%
Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin WordPress Books Gallery plugin <= 4.4.8 versions.