Mooveagency
3 CVEs across 8 Mooveagency products. Browse Mooveagency vulnerabilities, severities, and proof-of-concept exploits.
Mooveagency products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-0970 | Medium | 5.3 | 2025-05-15 | This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to man… |
CVE-2025-1624 | Low | 3.5 | 2025-03-16 | The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |
CVE-2025-1623 | Low | 3.5 | 2025-03-16 | The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |
CVE-2025-1622 | Low | 3.5 | 2025-03-16 | The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |
CVE-2025-1621 | Medium | 4.8 | 2025-03-16 | The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |
CVE-2025-1620 | Medium | 4.8 | 2025-03-16 | The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |
CVE-2025-1619 | Medium | 4.8 | 2025-03-16 | The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |
CVE-2025-2205 | Medium | 4.4 | 2025-03-12 | The GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice – CCPA, DSGVO, RGPD plugin for WordPress is vulnerable to Stored Cross-Site Scripting… |
CVE-2023-4521 | Critical | 9.8 | 2023-09-25 | The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor was not c… |
CVE-2023-4300 | High | 7.2 | 2023-09-25 | The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP f… |
CVE-2023-4150 | Medium | 4.3 | 2023-08-30 | The User Activity Tracking and Log WordPress plugin before 4.0.9 does not have proper CSRF checks when managing its license, which could allow attackers to mak… |
CVE-2023-4013 | Medium | 6.5 | 2023-08-30 | The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its license, which could… |
CVE-2019-25143 | Medium | 5.4 | 2023-06-07 | The GDPR Cookie Compliance plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the gdpr_cookie_compliance_reset_set… |
CVE-2020-24148 | Critical | 9.1 | 2021-07-07 | Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the data parameter in a moove_read_xml acti… |
CVE-2021-24287 | Medium | 6.1 | 2021-05-14 | The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab… |
CVE-2021-24286 | Medium | 6.1 | 2021-05-14 | The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to… |
CVE-2021-24247 | Medium | 5.4 | 2021-05-06 | The Contact Form Check Tester WordPress plugin through 1.0.2 settings are visible to all registered users in the dashboard and are lacking any sanitisation. As… |