wpbean records

7 published records for vendor wpbean.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 14.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
29Monitor	CVE-2024-11034No exploit	Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcodewpbean · request a quote for woocommerce – get a quote button · CWE-94 pre-auth RCE	High7.3	—	0.8%	Nov 23, 2024
29Monitor	CVE-2024-11038No exploit	WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcfwpbean · wpb popup for contact form 7 · CWE-94 pre-auth RCE	High7.3	—	0.6%	Nov 19, 2024
21Monitor	CVE-2023-0370No exploit	WPB Advanced FAQ <= 1.0.6 - Contributor+ Stored XSSwpbean · wpb advanced faq · CWE-79 XSS	Medium5.4	—	0.5%	Mar 20, 2023
21Monitor	CVE-2024-4896No exploit	WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameterwpbean · wpb elementor addons · CWE-79 XSS	Medium5.4	—	0.3%	May 22, 2024
21Monitor	CVE-2024-34791No exploit	WordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilitywpbean · wpb elementor addons · CWE-79 XSS	Medium5.4	—	0.3%	Jun 3, 2024
21Monitor	CVE-2024-3063No exploit	WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpbean · wpb elementor addons · CWE-79 XSS	Medium5.4	—	0.2%	May 30, 2024
21Monitor	CVE-2024-13664No exploit	WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpbean · wp post list table · CWE-79 XSS	Medium5.4	—	0.2%	Jan 30, 2025

CVE-2024-11034
29Monitor
Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode
HighCVSS 7.3No exploitEPSS 1%
- pre-auth RCE
wpbean · request a quote for woocommerce – get a quote buttonNov 23, 2024
CVE-2024-11038
29Monitor
WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf
HighCVSS 7.3No exploitEPSS 1%
- pre-auth RCE
wpbean · wpb popup for contact form 7Nov 19, 2024
CVE-2023-0370
21Monitor
WPB Advanced FAQ <= 1.0.6 - Contributor+ Stored XSS
MediumCVSS 5.4No exploitEPSS 0%
- XSS
wpbean · wpb advanced faqMar 20, 2023
CVE-2024-4896
21Monitor
WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
MediumCVSS 5.4No exploitEPSS 0%
- XSS
wpbean · wpb elementor addonsMay 22, 2024
CVE-2024-34791
21Monitor
WordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
wpbean · wpb elementor addonsJun 3, 2024
CVE-2024-3063
21Monitor
WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
wpbean · wpb elementor addonsMay 30, 2024
CVE-2024-13664
21Monitor
WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
wpbean · wp post list tableJan 30, 2025