191 matches found
CVE-2025-31565
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Lisandro Martinez WPSmartContracts wp-smart-contracts allows Blind SQL Injection.This issue affects WPSmartContracts: from n/a through = 2.0.12...
CVE-2025-31565 WordPress WPSmartContracts plugin <= 2.0.12 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Lisandro Martinez WPSmartContracts wp-smart-contracts allows Blind SQL Injection.This issue affects WPSmartContracts: from n/a through = 2.0.12...
WordPress Awesome Surveys plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Awesome Surveys versions = 2.0.10...
CVE-2025-28878
CVE-2025-28878 is a stored cross-site scripting vulnerability in the WordPress plugin Awesome Surveys (affected versions:
CVE-2024-47397
CVE-2024-47397 affects FXC AE1021 and AE1021PE with firmware 2.0.10 and earlier. The root cause is a weak authentication mechanism that can be bypassed by an undocumented specific string. Documented impacts in the sources describe a bypass of authentication, with no details on exploit vectors bey...
PT-2024-32616 · Ae1021Pe +1 · Ae1021Pe +1
Name of the Vulnerable Software and Affected Versions: AE1021 versions 2.0.10 and earlier AE1021PE versions 2.0.10 and earlier Description: A weak authentication issue exists, allowing the authentication to be bypassed with an undocumented specific string if the vulnerability is exploited...
PT-2024-36341 · Ae1021Pe +1 · Ae1021Pe +1
Name of the Vulnerable Software and Affected Versions: AE1021 versions 2.0.10 and earlier AE1021PE versions 2.0.10 and earlier Description: The issue exists due to the inclusion of undocumented features or 'chicken bits' in the firmware, which may allow a logged-in user to enable the telnet...
FXC AE1021和FXC AE1021PE 安全漏洞
FXC AE1021 and FXC AE1021PE are both products of FXC Corporation.FXC AE1021 is a panel wireless router with integrated RJ-45, RJ-11, and power ports.FXC AE1021PE is a wireless LAN router with support for information egress. A security vulnerability exists in the FXC AE1021 version 2.0.10 and...
WordPress WP Simple Booking Calendar plugin <= 2.0.10 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin WP Simple Booking Calendar versions = 2.0.10...
PT-2024-39161 · WordPress · Wp Simple Booking Calendar
Name of the Vulnerable Software and Affected Versions: WP Simple Booking Calendar plugin for WordPress versions up to, and including, 2.0.10 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg and remove query arg without appropriate escaping on the...
WordPress Academy LMS plugin <= 2.0.10 - Open Redirection vulnerability
Open Redirection vulnerability discovered by Mochamad Sofyan Patchstack Alliance in WordPress Plugin Academy LMS versions = 2.0.10...
OPENSUSE-SU-2024:10593-1 389-ds-2.0.10~git0.21dd2802c-1.1 on GA media
These are all security issues fixed in the 389-ds-2.0.10git0.21dd2802c-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-7FJV-25Q9-2W88 State Guessing Vulnerability in laravel/socialite
laravel/socialite versions prior to 2.0.10 are susceptible to a security vulnerability related to state guessing during OAuth authentication. This vulnerability could potentially lead to session hijacking, allowing attackers to compromise user sessions. The issue has been addressed and fixed in...
WordPress PropertyHive Plugin <= 2.0.10 is vulnerable to Cross Site Scripting (XSS)
Software PropertyHive Type Plugin Vulnerable versions = 2.0.10 Fixed in 2.0.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34381 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5b461efce659 Credits LVT-tholv2k Required privilege...
WordPress Plugin WP-FormAssembly 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...
WordPress WP-FormAssembly plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin WP-FormAssembly versions = 2.0.10...
WordPress WP-FormAssembly Plugin <= 2.0.10 is vulnerable to Cross Site Scripting (XSS)
Software WP-FormAssembly Type Plugin Vulnerable versions = 2.0.10 Fixed in 2.0.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49768 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2e39ae49a241 Credits Khalid Yusuf Required privilege...
PT-2023-24850 · WordPress · Wp Hide Post
Name of the Vulnerable Software and Affected Versions: WP Hide Post plugin versions = 2.0.10 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application...