WordPress plugin Lawyer Landing Page 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-2497

Name of the Vulnerable Software and Affected Versions: Rara Theme Lawyer Landing Page versions 1.2.4 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Rara Theme Lawyer Landing Page, allowing unauthorized actions to be performed on behalf of a user without their...

Debian dsa-5837 : fastnetmon - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5837 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5837-1 [email protected] https://www.debian.org/securit...

WordPress plugin Custom Product Tabs For WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2024-17722 · WordPress · Custom Product Tabs For Woocommerce

Name of the Vulnerable Software and Affected Versions: Custom Product Tabs For WooCommerce plugin for WordPress versions up to, and including, 1.2.4 Description: The Custom Product Tabs For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection via deserialization of untrusted inp...

WordPress Custom Product Tabs For WooCommerce plugin <= 1.2.4 - Authenticated (Shop Manager+) PHP Object Injection vulnerability

Authenticated Shop Manager+ PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Custom Product Tabs For WooCommerce versions = 1.2.4...

WordPress SaasPricing plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab in WordPress Plugin SaasPricing versions = 1.2.4...

CVE-2024-54435

Cross-Site Request Forgery CSRF vulnerability in Thomas Hoefter Onlywire Multi Autosubmitter onlywire-multi-autosubmitter allows Stored XSS.This issue affects Onlywire Multi Autosubmitter: from n/a through = 1.2.4...

CVE-2024-54426

Cross-Site Request Forgery CSRF vulnerability in crossfitatgg LeaderBoard Plugin leaderboard-lite allows Stored XSS.This issue affects LeaderBoard Plugin: from n/a through = 1.2.4...

WordPress plugin LeaderBoard 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

PT-2024-36325 · Unknown · Onlywire Multi Autosubmitter

Name of the Vulnerable Software and Affected Versions: Onlywire Multi Autosubmitter versions 1.2.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2024-36315 · Unknown · Leaderboard Plugin

Name of the Vulnerable Software and Affected Versions: LeaderBoard Plugin versions 1.2.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

CVE-2023-38479

Missing Authorization vulnerability in codents Simple Googlebot Visit simple-googlebot-visit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Googlebot Visit: from n/a through = 1.2.4...

WordPress plugin Accordion and Accordion Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress Onlywire Multi Autosubmitter plugin <= 1.2.4 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Onlywire Multi Autosubmitter versions = 1.2.4...

WordPress LeaderBoard Plugin plugin <= 1.2.4 - CSRF to Stored Cross-Site Scripting vulnerability

CSRF to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin LeaderBoard Plugin versions = 1.2.4...

WordPress plugin Database for CF7 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-13688 · Unknown · Code4Life Database For Cf7

Name of the Vulnerable Software and Affected Versions: Code4Life Database for CF7 versions 1.2.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Code4Life...

WordPress Friendly Functions for Welcart plugin <= 1.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Friendly Functions for Welcart versions = 1.2.4...

WordPress plugin Friendly Functions for Welcart 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...