Noorsplugin - vulnerabilities (CVEs)

7 CVEs in 5 products, 0 in the last 30 days, newest from 2024-10-20.

Products

CVE-2024-49627 - CVSS 8.8 (high), 2024-10-20: Cross-Site Request Forgery (CSRF) vulnerability in Noor Alam WordPress Image SEO allows Cross Site Request Forgery.This issue affects WordPress Image SEO:…
CVE-2023-51689 - CVSS 6.5 (medium), 2024-02-01: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in naa986 Easy Video Player allows Stored XSS.This issue…
CVE-2023-52143 - CVSS 7.5 (high), 2024-01-05: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Naa986 WP Stripe Checkout.This issue affects WP Stripe Checkout: from n/a through…
CVE-2022-3987 - CVSS 5.4 (medium), 2022-12-19: The Responsive Lightbox2 WordPress plugin before 1.0.4 does not validate and escape some of its shortcode attributes before outputting them back in the page,…
CVE-2022-3986 - CVSS 5.4 (medium), 2022-12-19: The WP Stripe Checkout WordPress plugin before 1.2.2.21 does not validate and escape some of its shortcode attributes before outputting them back in the page,…
CVE-2022-3937 - CVSS 5.4 (medium), 2022-12-19: The Easy Video Player WordPress plugin before 1.2.2.3 does not sanitize and escapes some parameters, which could allow users with a role as low as Contributor…
CVE-2022-3983 - CVSS 5.4 (medium), 2022-12-19: The Checkout for PayPal WordPress plugin before 1.0.14 does not validate and escape some of its shortcode attributes before outputting them back in the page,…