PT-2024-23109

Name of the Vulnerable Software and Affected Versions Serverpod versions prior to 1.2.6 Description An issue was identified with the old password hash algorithm used by Serverpod, making it susceptible to rainbow attacks if the database was compromised. The vulnerability is addressed by switching...

CVE-2024-1083

The Simple Restrict plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.6 via the REST API. This makes it possible for authenticated attackers to bypass the plugin's restrictions to extract post titles and content...

http-swagger security vulnerability

http-swagger is a net/http wrapper. A security vulnerability exists in http-swagger versions prior to 1.2.6, which stems from a vulnerability that allows attackers to conduct cross-site scripting XSS attacks via PUT requests...

PT-2024-10887 · WordPress · Wp Editor

Name of the Vulnerable Software and Affected Versions: WP Editor WordPress plugin version 1.2.6 and earlier Description: The issue is related to an authenticated blind SQL injection problem. It occurs because the plugin does not properly sanitise or validate its setting fields, allowing an...

MTab Bookmark Access Control Error Vulnerability

MTab Bookmark is a clean cut powerful navigation site from MTab Inc. MTab Bookmark is a simple and powerful navigation site from MTab, which allows you to quickly add your favorite websites to your bookmarks. An access control error vulnerability exists in MTab Bookmark version 1.2.6 and classifi...

UBUNTU-CVE-2023-49287

TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydirfileopen function. This vulnerability has been patched in version 1.2.6...

CVE-2023-49287 Buffer overflow vulnerabilities in tinydir

TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydirfileopen function. This vulnerability has been patched in version 1.2.6...

CVE-2023-49287 Buffer overflow vulnerabilities in tinydir

TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydirfileopen function. This vulnerability has been patched in version 1.2.6...

CVE-2023-49287

TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydirfileopen function. This vulnerability has been patched in version 1.2.6...

TinyDir Security Vulnerability

TinyDir is lightweight, portable and easy to integrate C directory and file reader. A security vulnerability exists in TinyDir versions prior to 1.2.6 that stems from the presence of a buffer overflow vulnerability...

PT-2023-7930 · Tinydir +1 · Tinydir +1

Name of the Vulnerable Software and Affected Versions: TinyDir versions prior to 1.2.6 Description: The issue is related to buffer overflows in the tinydir file open function, which can be exploited by a remote attacker to execute arbitrary code. TinyDir is a lightweight C directory and file...

CVE-2023-48744

Cross-Site Request Forgery CSRF vulnerability in Offshore Web Master Availability Calendar allows Cross Site Request Forgery.This issue affects Availability Calendar: from n/a through 1.2.6...

WordPress Parallax Slider Block Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Parallax Slider Block Type Plugin Vulnerable versions = 1.2.5 Fixed in 1.2.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49184 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 42f6243bda32 Credits emad Required privilege Author...

CVE-2023-5975

The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6. This is due to missing or incorrect nonce validation on multiple functions. This makes it possible for unauthenticated attackers to update the plugin settings via a forged...

CVE-2023-5506

The ImageMapper plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'imgmapdeleteareaajax' function in versions up to, and including, 1.2.6. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to...

PT-2023-32141 · WordPress · Imagemapper

Name of the Vulnerable Software and Affected Versions: ImageMapper plugin for WordPress versions up to, and including, 1.2.6 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the 'imagemap' shortcode, allowing authenticated...

WordPress ImageMapper Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software ImageMapper Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5507 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dd6f49b1b90c Credits Lana Codes Required privilege...

WordPress plugin Orders Tracking for WooCommerce path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability in the...

CVE-2023-38387

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Elastic Email Sender plugin = 1.2.6 versions...

PT-2023-26396 · Unknown · Email Sender

Name of the Vulnerable Software and Affected Versions: Elastic Email Sender plugin versions 1.2.6 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts into t...