WordPress Loginizer Security plugin <= 1.9.2 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by wesley wcraft in WordPress Plugin Loginizer Security versions = 1.9.2...

CVE-2024-41349

unmark 1.9.2 is vulnerable to Cross Site Scripting XSS via application/views/marks/addbyurl.php...

CVE-2024-41349

unmark 1.9.2 is vulnerable to Cross Site Scripting XSS via application/views/marks/addbyurl.php...

CVE-2024-41349

unmark 1.9.2 is vulnerable to Cross Site Scripting XSS via application/views/marks/addbyurl.php...

Unmark 安全漏洞

Unmark is an open source to-do list application for bookmarking by Colin Devroe Personal Developer. A security vulnerability exists in Unmark version 1.9.2, which stems from the presence of a cross-site scripting XSS vulnerability via application/views/marks/addbyurl.php...

CVE-2024-41349

unmark 1.9.2 is vulnerable to Cross Site Scripting XSS via application/views/marks/addbyurl.php...

PT-2024-29367

Name of the Vulnerable Software and Affected Versions unmark version 1.9.2 Description The issue is a Cross Site Scripting XSS vulnerability found in the application/views/marks/add by url.php file. This allows for potential malicious script execution. Recommendations For version 1.9.2, consider...

CVE-2024-41349

unmark 1.9.2 is vulnerable to Cross Site Scripting XSS via application/views/marks/addbyurl.php...

PT-2024-30483 · Checkout · Stripe Payments For Woocommerce

Name of the Vulnerable Software and Affected Versions: Stripe Payments For WooCommerce by Checkout versions 1.9.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, potentially allowing unauthorized actions. Upgrade to a newer version to remediate...

WordPress plugin MaxiBlocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-38785

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.2...

PT-2024-28218 · Jegstudio · Jegstudio Gutenverse

Name of the Vulnerable Software and Affected Versions: Jegstudio Gutenverse versions 1.9.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

WordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Gutenverse versions = 1.9.2...

WordPress Gutenverse Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)

Software Gutenverse Type Plugin Vulnerable versions = 1.9.2 Fixed in 1.9.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38785 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 73a432519c7f Credits João Pedro S Alcântara Kinorth Required...

OPENSUSE-SU-2024:13917-1 tlrc-1.9.2+0-1.1 on GA media

These are all security issues fixed in the tlrc-1.9.2+0-1.1 package on the GA media of openSUSE Tumbleweed...

WordPress Attire Blocks plugin <= 1.9.2 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Benedictus Jovan aillesiM in WordPress Plugin Attire Blocks versions = 1.9.2...

Nuki Bridge 安全漏洞

Nuki Bridge is a smart lock control software from Nuki. A security vulnerability exists in Nuki Bridge v1.x prior to v1.22.0 and v2.x prior to v2.13.2, and Nuki Keypad v1.9.2 prior to v1.9.2, which stems from the fact that sending an incorrectly formatted HTTP verb can force a device to reboot...

Nuki Bridge 安全漏洞

Nuki Bridge is a smart lock control software from Nuki. A security vulnerability exists in Nuki Bridge v1.x prior to v1.22.0 and v2.x prior to v2.13.2, and Nuki Keypad v1.9.2 prior to v1.9.2, which stems from the fact that sending multiple incorrectly-formatted packets can prevent certain functio...

CVE-2024-32463 phlex makes Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags

phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting XSS vulnerability that can be exploited via maliciously crafted user data. The filter to detect and prevent the use of the javascript: URL scheme in the href attribute of an tag...

WordPress USPS Shipping for WooCommerce plugin <= 1.9.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin USPS Shipping for WooCommerce – Live Rates versions = 1.9.2...