Filtered by vendor Wpchill Subscriptions
Total 82 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-8549 1 Wpchill 1 Strong Testimonials 2024-11-21 6.1 Medium
Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens.
CVE-2022-4972 1 Wpchill 1 Download Monitor 2024-10-30 7.5 High
The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7.51. This makes it possible for unauthenticated attackers to view user data and other sensitive information intended for administrators.