WordPress Terms descriptions Plugin <= 3.4.6 is vulnerable to Cross Site Scripting (XSS)

Software Terms descriptions Type Plugin Vulnerable versions = 3.4.6 Fixed in 3.4.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9374 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8fca607d99fe Credits vgo0 Required...

CVE-2024-48919

creationtimestamp| type| source ---|---|--- 2024-10-22 23:49:34+00:00| seen| https://t.me/cvedetector/8648...

CVE-2024-39753

creationtimestamp| type| source ---|---|--- 2024-10-22 22:09:05+00:00| seen| https://t.me/cvedetector/8644...

CVE-2024-46902

creationtimestamp| type| source ---|---|--- 2024-10-22 22:09:01+00:00| seen| https://t.me/cvedetector/8640 2026-07-16 21:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqs5dcfvkc2s...

CVE-2024-45518

creationtimestamp| type| source ---|---|--- 2024-10-22 20:28:39+00:00| seen| https://t.me/cvedetector/8637 2026-07-05 13:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpvneubtik2l...

CVE-2024-49209

creationtimestamp| type| source ---|---|--- 2024-10-22 20:28:28+00:00| seen| https://t.me/cvedetector/8630...

CVE-2024-49211

creationtimestamp| type| source ---|---|--- 2024-10-22 20:28:25+00:00| seen| https://t.me/cvedetector/8627...

The severity of the Elevation of Privilege – Windows Kernel-Mode Driver (CVE-2024-35250) vulnerability has increased

The severity of the Elevation of Privilege - Windows Kernel-Mode Driver CVE-2024-35250 vulnerability has increased. This vulnerability was fixed as part of the June Microsoft Patch Tuesday. As in the case of the CVE-2024-30090 vulnerability, it was discovered by a researcher with the nickname...

CVE-2022-23861

creationtimestamp| type| source ---|---|--- 2024-10-22 18:48:08+00:00| seen| https://t.me/cvedetector/8626...

CVE-2024-48929

creationtimestamp| type| source ---|---|--- 2024-10-22 18:47:59+00:00| seen| https://t.me/cvedetector/8618...

CVE-2024-26271

creationtimestamp| type| source ---|---|--- 2024-10-22 17:57:51+00:00| seen| https://t.me/cvedetector/8614 2026-07-05 13:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpvp2jg2bd2l...

CVE-2024-8980

creationtimestamp| type| source ---|---|--- 2024-10-22 17:57:48+00:00| seen| https://t.me/cvedetector/8611 2026-06-27 07:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpavjs4lpt2k...

CVE-2024-50312

creationtimestamp| type| source ---|---|--- 2024-10-22 17:07:36+00:00| seen| https://t.me/cvedetector/8607 2025-01-15 06:10:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1704...

CVE-2024-48926

Umbraco, a free and open source .NET content management system, has an insufficient session expiration issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. The Backoffice displays the logout page with a session timeout message before the server...

CVE-2024-48927

Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full...

CVE-2020-12251

creationtimestamp| type| source ---|---|--- 2024-10-22 15:53:13+00:00| seen| https://t.me/CyberSecurityTechnologies/1046...

CVE-2020-12252

creationtimestamp| type| source ---|---|--- 2024-10-22 15:53:13+00:00| seen| https://t.me/CyberSecurityTechnologies/1046...

CVE-2024-48927 Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice

Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full...

CVE-2024-48926

CVE-2024-48926 affects Umbraco CMS. The issue is an insufficient session expiration in the Backoffice where the logout page shows a timeout message ~30 seconds before the server session expires. Affected versions: 13.x prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. Patches are p...

CVE-2024-48926 Umbraco CMS logout page displayed before session expiration

Umbraco, a free and open source .NET content management system, has an insufficient session expiration issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. The Backoffice displays the logout page with a session timeout message before the server...