Stellarwp vulnerabilities
137 CVEs and advisories name Stellarwp as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-24888WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.2.25 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2024-23500WordPress Kadence Blocks plugin <= 3.2.19 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2024-30229WordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability
- CVE-2024-27987WordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-1541Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-1053Event Tickets and Registration <= 5.8.1 - Missing Authorization
- CVE-2023-6557The Events Calendar <= 6.2.8.2 - Unauthenticated Sensitive Information Exposure
- CVE-2024-1208LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
- CVE-2024-1209LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
- CVE-2024-1210LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
- CVE-2023-4247GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivation
- CVE-2023-4246GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation
- CVE-2023-4248GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion
- CVE-2023-47668WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure
- CVE-2023-3105LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
- CVE-2023-2834BookIt <= 2.3.7 - Authentication Bypass
- CVE-2022-2117GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure