WordPress Wovax IDX plugin <= 1.2.2 - Account Takeover vulnerability

Account Takeover vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Wovax IDX versions = 1.2.2...

WordPress plugin Woocommerce Support System 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-12955 · Unknown · Woocommerce Support System

Name of the Vulnerable Software and Affected Versions: WooCommerce Support System versions 1.2.0 through 1.2.2 Description: A Cross-Site Request Forgery CSRF issue affects the WooCommerce Support System, allowing unauthorized actions. Users are advised to update to the latest version to mitigate...

CVE-2023-30476

Missing Authorization vulnerability in sparklewpthemes Blogger Buzz blogger-buzz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blogger Buzz: from n/a through = 1.2.2...

CVE-2023-23715

Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoardWP – Job Board Listings and Submissions: from n/a through 1.2.2...

CVE-2023-23715

CVE-2023-23715 affects WordPress plugin JobBoardWP – Job Board Listings and Submissions (versions

PT-2024-36141 · Unknown · Blazethemes News Kit Elementor Addons

Name of the Vulnerable Software and Affected Versions: BlazeThemes News Kit Elementor Addons versions 1.2.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker c...

PT-2024-11993 · Unknown · Jobboardwp

Name of the Vulnerable Software and Affected Versions: JobBoardWP – Job Board Listings and Submissions versions 1.2.2 and earlier Description: The issue is related to a missing authorization vulnerability in JobBoardWP, which allows the exploitation of incorrectly configured access control securi...

WordPress plugin Blogger Buzz 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-12236 · Sparkle Themes · Sparkle Themes Blogger Buzz

Name of the Vulnerable Software and Affected Versions: Sparkle Themes Blogger Buzz versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Sparkle...

WordPress plugin JobBoardWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress TAX SERVICE Electronic HDM plugin <= 1.2.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by stealthcopter in WordPress Plugin TAX SERVICE Electronic HDM versions = 1.2.2...

CVE-2024-53765

CVE-2024-53765 is a CSRF-to-Stored XSS vulnerability affecting the WordPress plugin Mins To Read (versions up to 1.2.2). The provided documents confirm the issue but do not specify exploitation details or a confirmed fixed version; the Patchstack/CVE entries indicate older versions are affected, ...

WordPress plugin Mins To Read 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2024-35876 · Unknown · Mins To Read

Name of the Vulnerable Software and Affected Versions: Mins To Read versions 1.2.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF problem that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

WordPress Theme Builder For Elementor plugin <= 1.2.2 - Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Theme Builder For Elementor versions = 1.2.2...

WordPress plugin Theme Builder For Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-16541 · WordPress · The Theme Builder For Elementor

Name of the Vulnerable Software and Affected Versions: The Theme Builder For Elementor plugin for WordPress versions up to, and including, 1.2.2 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or draft posts created by...

CVE-2024-3379

In lunary-ai/lunary versions 1.2.2 through 1.2.6, an incorrect authorization vulnerability allows unprivileged users to re-generate the private key for projects they do not have access to. Specifically, a user with a 'Member' role can issue a request to regenerate the private key of a project...

CVE-2024-3379 Incorrect Authorization in lunary-ai/lunary

In lunary-ai/lunary versions 1.2.2 through 1.2.6, an incorrect authorization vulnerability allows unprivileged users to re-generate the private key for projects they do not have access to. Specifically, a user with a 'Member' role can issue a request to regenerate the private key of a project...