Search Results (142 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-15873 1 Metagauss 1 Profilegrid 2024-11-21 N/A
The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php substring followed by PHP code.
CVE-2024-39643 1 Metagauss 1 Registrationmagic 2024-09-11 5.8 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RegistrationMagic Forms RegistrationMagic allows Stored XSS.This issue affects RegistrationMagic: from n/a through 6.0.0.1.