Skip to content
Sign in
5.9 Medium

CVE-2024-2375 The WPQA Builder WordPress plugin before 6.1.1 does not sanitise and escape some of its Slider settings, which could…

Description

The WPQA Builder WordPress plugin before 6.1.1 does not sanitise and escape some of its Slider settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
WPQA Builder 6.1 earliest → < 6.1.1 6.1.1
wpqa_builder 6.1 earliest → < 6.1.1 6.1.1

Other CVEs of WPQA Builder

The 7 CVEs of WPQA Builder →
CVE-2024-2376 The WPQA Builder WordPress plugin before 6.1.1 does not have CSRF checks in some places, which could allow attackers… 8.8 High CVE-2022-3343 The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress… 3.5 Low CVE-2022-3688 The WPQA Builder WordPress plugin before 5.9 does not have CSRF check when following and unfollowing users, which… 8.8 High CVE-2022-2198 The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check… Not rated
Track this CVE