GCVE - cpe:2.3:a:jamie_bergen:plugin_notes

Approved changes feed: RSS · Atom

cpe:2.3:a:jamie_bergen:plugin_notes_plus:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jamie Bergen (`0034af9a-3a0a-5541-bca1-87e396be936f`)
Product	Plugin Notes Plus (`a9efbdfa-b68f-5093-8400-98806ca894ec`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-43326`	vulnerable	2026-06-08 06:45:50.111633	WordPress Plugin Notes Plus plugin <= 1.2.7 - Arbitrary Content Deletion vulnerability MEDIUM (5.4) Missing Authorization vulnerability in Jamie Bergen Plugin Notes Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Plugin Notes Plus: from n/a through 1.2.7. Published: 2024-08-19T19:25:01.321Z Updated: 2026-04-28T16:10:13.060Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/plugin-notes-plus/wordpress-plugin-notes-plus-plugin-1-2-7-arbitrary-content-deletion-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-37561`	vulnerable	2026-06-08 06:39:47.942136	WordPress Plugin Notes Plus plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability MEDIUM (5.9) Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jamie Bergen Plugin Notes Plus allows Stored XSS.This issue affects Plugin Notes Plus: from n/a through 1.2.6. Published: 2024-07-20T09:18:10.393Z Updated: 2026-04-28T16:10:01.329Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/plugin-notes-plus/wordpress-plugin-notes-plus-plugin-1-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.