WordPress plugin Backup Migration security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2023-32829

Name of the Vulnerable Software and Affected Versions Backup Migration plugin for WordPress versions up to, and including, 1.3.9 Description The issue allows unauthenticated attackers to perform Path Traversal via the content-backups and content-name, content-manifest, or content-bmitmp and...

PT-2023-32835 · WordPress · Backup Migration

Name of the Vulnerable Software and Affected Versions: Backup Migration plugin for WordPress versions up to, and including, 1.3.9 Description: The issue allows authenticated attackers with administrator-level permissions and above to execute arbitrary commands on the host operating system via the...

PT-2023-32828 · WordPress +1 · Backup Migration +1

Name of the Vulnerable Software and Affected Versions: Backup Migration plugin for WordPress versions 1.0.8 through 1.3.9 Description: The issue allows unauthenticated attackers to include remote files on the server, resulting in code execution, via the content-dir HTTP header. Successful...

WordPress Legal Pages Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Legal Pages Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47824 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b92eaa57c24a Credits Brandon Roldan Required...

CVE-2023-46640

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in D. Relton Medialist plugin = 1.3.9 versions...

PT-2023-30132 · Unknown · D. Relton Medialist Plugin

Name of the Vulnerable Software and Affected Versions: D. Relton Medialist plugin versions = 1.3.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability allows an attacker to inject malicious scripts into the website, potentially leading to...

WordPress Medialist Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)

Software Medialist Type Plugin Vulnerable versions = 1.3.9 Fixed in 1.4.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-46640 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 22ee4e11fa05 Credits Tien from VNPT-VCI Required privilege...

CVE-2023-36123

Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information...

CVE-2023-36123

Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information...

CVE-2023-36123

CVE-2023-36123 concerns a Directory Traversal in Hex-Dragon Plain Craft Launcher 2, version Alpha 1.3.9. The connected documents identify the affected software as Hex-Dragon Plain Craft Launcher 2 and specify the vulnerability arises from a directory traversal flaw that enables local attackers to...

CVE-2023-36123

Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information...

Plain Craft Launcher Path Traversal Vulnerability

Plain Craft Launcher is a software. A security vulnerability exists in Plain Craft Launcher version 1.3.9 that originates from a vulnerability that could allow a local attacker to execute arbitrary code and obtain sensitive information...

CVE-2023-36123

Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information...

PT-2023-25437 · Unknown · Hex-Dragon Plain Craft Launcher 2

Name of the Vulnerable Software and Affected Versions: Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9 Description: The issue allows local attackers to execute arbitrary code and gain sensitive information due to a Directory Traversal vulnerability. Recommendations: For Hex-Dragon Plain Cra...

CVE-2023-25453

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ian Sadovy WordPress Tables plugin = 1.3.9 versions...

CVE-2023-25453 WordPress WordPress Tables Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ian Sadovy WordPress Tables plugin = 1.3.9 versions...

CVE-2019-25141 Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update

The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks on the admininit function, in addition to insufficient input validation. This makes it possible for unauthenticated attackers to modify the...

CVE-2022-46820

Cross-Site Request Forgery CSRF vulnerability in WPJoli Joli Table Of Contents plugin = 1.3.9 versions...

PT-2023-15064 · WordPress · Wpjoli Joli Table Of Contents

Name of the Vulnerable Software and Affected Versions: WPJoli Joli Table Of Contents plugin versions prior to 1.3.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended action...