0xB9

Title	CVE ID	CVSS	Vector	Date
Popup Box <= 2.1.2 - Authenticated Local File Inclusion	CVE-2022-29445	6.8	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H	May 17, 2022
Counter Box <= 1.1.1 - Authenticated Local File Inclusion	CVE-2022-29446	6.8	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H	May 16, 2022
Hover Effects – easily create any hover effect <= 2.1 - Authenticated Local File Inclusion	CVE-2022-29447	6.8	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H	May 16, 2022
Herd Effects <= 5.2 - Local File Inclusion	CVE-2022-29448	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	May 16, 2022
Easy Google Maps <= 1.9.31 - Reflected Cross-Site Scripting	CVE-2021-46780	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 9, 2022
Pricing Table by Supsystic <= 1.9.4 - Reflected Cross-Site Scripting	CVE-2021-46782	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 9, 2022
Coming Soon by Supsystic <= 1.7.5 - Reflected Cross-Site Scripting	CVE-2021-46781	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 9, 2022
Post Grid <= 2.1.7 - Reflected Cross-Site Scripting	CVE-2021-24488	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	June 28, 2021
PickPlugins Product Slider for WooCommerce <= 1.13.21 - Reflected Cross-Site Scripting	CVE-2021-24300	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 6, 2021
Redirect 404 to parent < 1.3.1 - Reflected Cross-Site Scripting	CVE-2021-24286	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 23, 2021
Select All Categories and Taxonomies, Change Checkbox to Radio Buttons < 1.3.2 - Reflected Cross-Site Scripting	CVE-2021-24287	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 23, 2021
Contact Form by Supsystic <= 1.7.14 - Reflected Cross-Site scripting	CVE-2021-24276	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 19, 2021
Ultimate Maps by Supsystic <= 1.2.4 - Reflected Cross-Site scripting	CVE-2021-24274	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 19, 2021
Popup by Supsystic <= 1.10.4 - Reflected Cross-Site Scripting	CVE-2021-24275	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 19, 2021
Fitness Calculators <= 1.9.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting	CVE-2021-24272	5.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N	April 14, 2021
Business Directory Plugin <= 5.11.1 - Authenticated Stored Cross-Site Scripting	CVE-2021-24250	5.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N	April 12, 2021
Business Directory Plugin <= 5.11.1 - Cross-Site Request Forgery to Arbitrary Payment History Update	CVE-2021-24251	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	April 12, 2021
Business Directory Plugin – Easy Listing Directories for WordPress <= 5.11.1 - Cross-Site Request Forgery to Arbitrary Listing Export	CVE-2021-24249	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	April 12, 2021
Business Directory Plugin <= 5.10.1 - Cross-Site Request Forgery to Arbitrary File Upload	CVE-2021-24179	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	April 11, 2021
Business Directory Plugin < 5.11 - Cross-Site Request Forgery	CVE-2021-24178	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	April 11, 2021

Share this researcher's vulnerability discoveries

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation