cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-10695,https://securityvulnerability.io/vulnerability/CVE-2024-10695,Vulnerability in Futurio Extra Plugin Allows Access to Private Posts,"The Futurio Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.0.13 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts that they should not have access to.",Wordpress,Futurio Extra,4.3,MEDIUM,0.00044999999227002263,false,,false,false,false,,false,false,2024-11-12T03:24:57.460Z,0
CVE-2024-5646,https://securityvulnerability.io/vulnerability/CVE-2024-5646,Stored Cross-Site Scripting Vulnerability in Futurio Extra Plugin for WordPress,"The Futurio Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘header_size’ attribute within the Advanced Text Block widget in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",Wordpress,Futurio Extra,6.4,MEDIUM,0.00044999999227002263,false,,false,false,false,,false,false,2024-06-11T20:33:00.081Z,0
CVE-2021-25110,https://securityvulnerability.io/vulnerability/CVE-2021-25110,Futurio Extra < 1.6.3 - Subscriber+ User Email Address Disclosure,"The Futurio Extra WordPress plugin before 1.6.3 allows any logged in user, such as subscriber, to extract any other user's email address.",Wordpress,Futurio Extra,4.3,MEDIUM,0.000539999979082495,false,,false,false,false,,false,false,2022-02-14T09:20:53.000Z,0
CVE-2021-25109,https://securityvulnerability.io/vulnerability/CVE-2021-25109,Futurio Extra < 1.6.3 - Authenticated SQL Injection,The Futurio Extra WordPress plugin before 1.6.3 is affected by a SQL Injection vulnerability that could be used by high privilege users to extract data from the database as well as used to perform Cross-Site Scripting (XSS) against logged in admins by making send open a malicious link.,Wordpress,Futurio Extra,2.7,LOW,0.000539999979082495,false,,false,false,false,,false,false,2022-02-14T09:20:52.000Z,0