PT-2024-17579 · WordPress · Export Customers Data Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: Export Customers Data plugin for WordPress versions up to, and including, 1.2.3 Description: The issue is related to Reflected Cross-Site Scripting via the t parameter due to insufficient input sanitization and output escaping. This allows...

SUSE CVE-2024-56327

pyrage is a set of Python bindings for the rage file encryption library age in Rust. pyrage uses the Rust age crate for its underlying operations, and age is vulnerable to GHSA-4fg7-vxc8-qx5w. All details of GHSA-4fg7-vxc8-qx5w are relevant to pyrage for the versions specified in this advisory. S...

UBUNTU-CVE-2024-56327

pyrage is a set of Python bindings for the rage file encryption library age in Rust. pyrage uses the Rust age crate for its underlying operations, and age is vulnerable to GHSA-4fg7-vxc8-qx5w. All details of GHSA-4fg7-vxc8-qx5w are relevant to pyrage for the versions specified in this advisory. S...

CVE-2024-55975

CVE-2024-55975 — Dr Affiliate This vulnerability affects Dr Affiliate

WordPress plugin Dr Affiliate SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

PT-2024-36790

Name of the Vulnerable Software and Affected Versions pyrage versions 1.2.0 through 1.2.2 Description The issue concerns the execution of arbitrary binaries due to malicious plugin names, recipients, or identities. This can occur when a plugin name containing a path separator is provided to the a...

PT-2024-36627 · Unknown · Dr Affiliate

Name of the Vulnerable Software and Affected Versions: Dr Affiliate versions 1.2.3 and earlier Description: The issue is related to an SQL Injection vulnerability, which allows attackers to manipulate SQL commands. This is due to the improper neutralization of special elements used in an SQL...

WordPress Preloader by WordPress Monsters plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Preloader by WordPress Monsters versions = 1.2.3...

PT-2024-36263 · Unknown · Quietly Insights

Name of the Vulnerable Software and Affected Versions: Quietly Insights versions prior to 1.2.3 Description: The issue is related to a missing authorization vulnerability that allows privilege escalation. Recommendations: For versions prior to 1.2.3, update to version 1.2.3 or later to resolve th...

CVE-2024-54308

CVE-2024-54308: Stored XSS in Cryptocurrency Price Widget (WordPress). Improper neutralization of input during web page generation allows stored cross-site scripting; affected plugin versions up to 1.2.3. Patch/update to 1.2.3 or later, per Red Hat/Wordfence entries.

WordPress plugin Cryptocurrency Price Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Visual Recent Posts plugin <= 1.2.3 - Reflected Cross Site Request Forgery (CSRF) vulnerability

Reflected Cross Site Request Forgery CSRF vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Visual Recent Posts versions = 1.2.3...

WordPress Cryptocurrency Price Widget plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Aiden in WordPress Plugin Cryptocurrency Price Widget versions = 1.2.3...

CVE-2024-53709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nasir Uddin Generic Elements generic-elements-for-elementor allows DOM-Based XSS.This issue affects Generic Elements: from n/a through = 1.2.5...

WordPress plugin Generic Elements 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Generic Elements Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Generic Elements Type Plugin Vulnerable versions = 1.2.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-53709 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a419d1007301 Credits Gab Required privilege Contributor...

WordPress plugin Easy Accordion Gutenberg Block 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2024-34805 · WordPress · Zakaria Binsaifullah Easy Accordion Gutenberg Block

Name of the Vulnerable Software and Affected Versions: Zakaria Binsaifullah Easy Accordion Gutenberg Block versions 1.2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...

WordPress plugin CF7 Reply Manager 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue exists in the WordPres...

WordPress Easy Accordion Gutenberg Block plugin <= 1.2.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Easy Accordion Gutenberg Block versions = 1.2.3...