Pickplugins vulnerabilities, page 3

89 vulnerabilities

Known vulnerabilities in Pickplugins products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 29 products.

9.8CriticalCVE-2022-4693pickplugins · user_verification +2 moreUser Verification < 1.0.94 - Authentication BypassThe User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.EPSS1.60%9.8CriticalCVE-2024-54273pickplugins · mail picker +1 moreWordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in PickPlugins Mail Picker mail-picker allows Object Injection.This issue affects Mail Picker: from n/a through <= 1.0.14.EPSS0.71%6.4MediumCVE-2024-13469pickplugins · pickplugins pricing table +2 morePricing Table by PickPlugins <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site ScriptingThe Pricing Table by PickPlugins plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button Link in all versions up to, and including, 1.12.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.EPSS0.21%8.8HighCVE-2024-13408pickplugins · post_grid +2 morePost Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File InclusionThe Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' attribute of the `pgcu` shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php files can be uploaded and included.EPSS0.59%5.3MediumCVE-2024-13798pickplugins · comboblocks +2 morePost Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order CreationThe Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, and including, 2.3.5. This is due to insufficient verification on form fields. This makes it possible for unauthenticated attackers to create new orders for products and mark them as paid without actually completing a payment.EPSS0.33%7.5HighCVE-2024-13796pickplugins · post_grid +1 morePost Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information ExposureThe Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.6 via the /wp-json/post-grid/v2/get_users REST API This makes it possible for unauthenticated attackers to extract sensitive data including including emails and other user data.EPSS0.44%6.4MediumCVE-2024-1988pickplugins · post_grid +1 morePost Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site ScriptingThe Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' attribute in blocks in all versions up to, and including, 2.2.80 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.EPSS0.26%5.4MediumCVE-2024-1641pickplugins · accordions +1 moreAccordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post DuplicationThe Accordion plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'accordions_duplicate_post_as_draft' function in all versions up to, and including, 2.2.96. This makes it possible for authenticated attackers, with contributor access and above, to duplicate arbitrary posts, allowing access to the contents of password-protected posts.EPSS0.48%5.3MediumCVE-2024-55993pickplugins · job board manager +1 moreWordPress Job Board Manager plugin <= 2.1.61 - Broken Access Control vulnerabilityMissing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through <= 2.1.61.EPSS0.55%9.8CriticalCVE-2024-11080pickplugins · post_grid +1 morePost Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook InjectionThe Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the ~/includes/blocks/form-wrap/function.php file. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress, granted no other security controls are present in the function.EPSS0.45%6.5MediumCVE-2024-47340pickplugins · post grid and gutenberg blocks +1 moreWordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.2.89.EPSS0.27%6.5MediumCVE-2024-47342pickplugins · accordion +1 moreWordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Accordion accordions allows Stored XSS.This issue affects Accordion: from n/a through <= 2.2.99.EPSS0.27%5.4MediumCVE-2024-0881pickplugins · post_grid +2 moreCombo Blocks < 2.2.76 - Unauthenticated Password Protected Posts AccessThe Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not have proper authorization, resulting in password protected posts to be displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such postsEPSS16.91%9.8CriticalCVE-2024-9636pickplugins · post grid and gutenberg blocks – comboblocks +1 morePost Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege EscalationThe Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in versions 2.2.85 to 2.3.3. This is due to the plugin not properly restricting what user meta can be updated during profile registration. This makes it possible for unauthenticated attackers to register on the site as an administrator.EPSS0.83%6.4MediumCVE-2024-9111pickplugins · pickplugins product designer for woocommerce +1 moreProduct Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadThe Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.36 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.EPSS0.53%6.4MediumCVE-2024-9645pickplugins · post_grid +2 morePost Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSSThe Post Grid, Posts Slider, Posts Carousel, Post Filter, Post Masonry WordPress plugin before 2.2.93 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.EPSS0.32%9.8CriticalCVE-2024-31277pickplugins · product designer +1 moreWordPress Product Designer plugin <= 1.0.32 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in PickPlugins Product Designer.This issue affects Product Designer: from n/a through 1.0.32.EPSS0.47%6.4MediumCVE-2024-4042pickplugins · comboblocks +2 morePost Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block AttributeThe Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' attribute of the menu-wrap-item block in all versions up to, and including, 2.2.80 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.EPSS0.26%6.5MediumCVE-2024-43321pickplugins · team_showcase +1 moreWordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23.EPSS0.26%6.5MediumCVE-2024-43155pickplugins · comboblocks +1 moreWordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins ComboBlocks allows Stored XSS.This issue affects ComboBlocks: from n/a through 2.2.86.EPSS0.26%