CVE-2024-35753

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TemplatesNext TemplatesNext OnePager allows Stored XSS.This issue affects TemplatesNext OnePager: from n/a through 1.3.3...

WordPress plugin TemplatesNext OnePager Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress TemplatesNext OnePager plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin TemplatesNext OnePager versions = 1.3.3...

CVE-2024-4788

The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createbhfpost function in all versions up to, and including, 1.3.3. This makes it possible for authenticated attackers, with...

WordPress plugin Boostify Header Footer Builder for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-32870 · WordPress · Boostify Header Footer Builder

Name of the Vulnerable Software and Affected Versions: Boostify Header Footer Builder for Elementor plugin for WordPress versions up to, and including, 1.3.3 Description: The issue is related to unauthorized modification of data due to a missing capability check on the create bhf post function...

WordPress SVGator plugin < 1.3.3- Authenticated Stored XSS via SVG Upload vulnerability

WordPress SVGator plugin 1.3.3- Authenticated Stored XSS via SVG Upload vulnerability discovered by Rayhan Ramdhany Hanaputra in WordPress Plugin SVGator – Add Animated SVG Easily versions 1.3.3...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in wasmloader.c. An attacker can cause a segmentation fault and a crash. Remediation Upgrade wasm-micro-runtime to version 1.3.3 or higher. References - GitHub Commit - GitHub Issue - GitHub PR...

ethOS 安全漏洞

ethOS is an application from ethOS, Inc. A security vulnerability exists in ethOS version 1.3.3 and prior versions, which stems from allowing man-in-the-middle attacks...

WordPress plugin Headline Analyzer 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin MDTF versions = 1.3.3...

WordPress Headline Analyzer plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Headline Analyzer versions = 1.3.3...

PT-2024-24658 · WordPress · Wp File Download Light

Name of the Vulnerable Software and Affected Versions: WP File Download Light versions 1.3.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

WordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin WP File Download Light versions = 1.3.3...

PT-2024-12312 · Unknown · Easyappointments

Name of the Vulnerable Software and Affected Versions: Easy!Appointments versions 1.3.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in Easy!Appointments. Recommendations: For versions 1.3.3 and earlier, at the moment, there is no information about a newe...

WordPress Nudgify Social Proof, Sales Popup & FOMO plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Nudgify Social Proof, Sales Popup & FOMO versions = 1.3.3...

WordPress Nudgify Social Proof, Sales Popup & FOMO Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Nudgify Social Proof, Sales Popup & FOMO Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31239 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e8dea74c6b88...

CVE-2024-30426

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HashThemes Hash Elements allows Stored XSS.This issue affects Hash Elements: from n/a through 1.3.3...

CVE-2024-30426

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HashThemes Hash Elements allows Stored XSS.This issue affects Hash Elements: from n/a through 1.3.3...

PT-2024-23353 · Unknown · Hash Elements

Name of the Vulnerable Software and Affected Versions: Hash Elements versions 1.3.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...