CVE-2024-8102
- EPSS 0.28%
- Veröffentlicht 04.09.2024 07:15:03
- Zuletzt bearbeitet 05.09.2024 13:28:54
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the module_all_toggle_ajax() function in all versions ...
CVE-2024-8104
- EPSS 3.09%
- Veröffentlicht 04.09.2024 07:15:03
- Zuletzt bearbeitet 05.09.2024 13:28:06
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.0.8 via the download_file_ajax function. This makes it possible for authenticated attackers, with subsc...
CVE-2024-37259
- EPSS 4.8%
- Veröffentlicht 22.07.2024 09:15:06
- Zuletzt bearbeitet 01.04.2026 16:17:22
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Extended The Ultimate WordPress Toolkit – WP Extended wpextended.This issue affects The Ultimate WordPress Toolkit – WP Extended: from n/a throug...