Filter
AND
Software
Metagauss EventprimeEventPrime – Events Calendar, Bookings and Tickets <= 4.0.5.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name
7.2
First published (updated )
Metagauss ProfilegridProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion
8.1
First published (updated )
Metagauss RegistrationmagicWordPress RegistrationMagic Plugin <= 5.2.4.1 is vulnerable to Cross Site Scripting (XSS)
7.1
EPSS
0.05%
First published (updated )
Metagauss ProfilegridWordPress ProfileGrid Plugin <= 5.0.3 is vulnerable to Broken Access Control
8.8
First published (updated )
Metagauss RegistrationmagicWordPress RegistrationMagic Plugin <= 5.2.4.5 is vulnerable to SQL Injection
7.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Metagauss RegistrationmagicWordPress RegistrationMagic Plugin <= 5.2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Metagauss ProfilegridWordPress ProfileGrid Plugin <= 5.6.6 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Metagauss EventprimeWordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)
7.1
First published (updated )
Metagauss ProfilegridThe ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a mis…
8.8
First published (updated )
Metagauss ProfilegridThe ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a mis…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Metagauss Download ThemeWordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Metagauss EventprimeWordPress EventPrime Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)
7.1
First published (updated )
Metagauss Download PluginWordPress Download Plugin Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Metagauss EventprimeWordPress EventPrime Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)
7.1
First published (updated )
Metagauss RegistrationmagicThe RegistrationMagic plugin for WordPress is vulnerable to Insecure Direct Object References in ver…
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Metagauss ProfilegridProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset
8.8
First published (updated )
Metagauss RegistrationmagicWordPress RegistrationMagic Plugin <= 5.1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Metagauss ProfilegridWordPress ProfileGrid plugin <= 5.1.6 - Auth. CSV Injection vulnerability
8.8
First published (updated )
Metagauss RegistrationmagicRegistrationMagic < 5.0.2.2 - Admin+ SQL Injection
7.2
First published (updated )
Metagauss RegistrationmagicRegistrationMagic < 5.0.1.6 - Admin+ SQL Injection
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Metagauss RegistrationmagicIn the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote aut…
8.8
First published (updated )
Metagauss RegistrationmagicThe RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with m…
8.8
First published (updated )
Metagauss RegistrationmagicIn the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote aut…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.