WordPress Clone plugin <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace' vulnerability

Unauthenticated PHP Object Injection via 'recursiveunserializedreplace' vulnerability discovered by Webbernaut in WordPress Plugin Clone versions = 2.4.6...

WordPress plugin Clone 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2024-16638 · WordPress · Clone

Name of the Vulnerable Software and Affected Versions: The Clone plugin for WordPress versions up to, and including, 2.4.6 Description: The issue allows unauthenticated attackers to inject a PHP Object via deserialization of untrusted input in the recursive unserialized replace function. If a POP...

WordPress plugin Razorpay Payment Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Razorpay Payment Button plugin <= 2.4.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Razorpay Payment Button versions = 2.4.6...

PT-2024-16590 · Razorpay · Razorpay Payment Button Plugin

Name of the Vulnerable Software and Affected Versions: Razorpay Payment Button Plugin versions prior to 2.4.6 Description: The Razorpay Payment Button Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add query arg and remove query arg without appropriate...

Malicious code in kakakakka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e063b8852b345979ae3d75e4c6ab7f3ed469a5c393eff7061afa0de4db66fc69 The OpenSSF Package Analysis project identified 'kakakakka' @ 2.4.6 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10325 Malicious code in kakakakka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e063b8852b345979ae3d75e4c6ab7f3ed469a5c393eff7061afa0de4db66fc69 The OpenSSF Package Analysis project identified 'kakakakka' @ 2.4.6 npm as malicious. It is considered malicious because: - The package...

WordPress plugin Add Widget After Content 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2024-39918 · WordPress · Add Widget After Content

Name of the Vulnerable Software and Affected Versions: Add Widget After Content plugin for WordPress versions up to, and including, 2.4.6 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows...

WordPress Admin Management Xtended plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Admin Management Xtended versions = 2.4.6...

WordPress Admin Management Xtended Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)

Software Admin Management Xtended Type Plugin Vulnerable versions = 2.4.6 Fixed in 2.4.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49307 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 966456ab80af Credits Trương Hữu Phúc truonghuuphuc...

Fermax com.fermax.vida 安全漏洞

Fermax com.fermax.vida is a firmware program from Fermax, Inc. A security vulnerability exists in Fermax com.fermax.vida version 2.4.6, which stems from contains a vulnerability that allows remote attackers to obtain sensitive information through the firmware update process...

Access Control Bypass

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Access Control Bypass due to improper handling of sensitive information. An attacker with administrative privileges can bypass security features, leading to a low impact on...

Improper Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Improper Authorization allowing a low-privileged attacker to escalate privileges and bypass security measures to affect confidentiality without user interaction. Remediatio...

Improper Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Improper Authorization allowing a low-privileged attacker could bypass security measures and impact confidentiality and integrity without user interaction. Remediation...

GHSA-J3MH-WX5F-2VHG Magento Open Source Information Exposure vulnerability

Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in furth...

Access Control Bypass

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Access Control Bypass. An attacker can escalate privileges by leveraging the improper access control settings. Remediation Upgrade magento/community-edition to version...

Access Control Bypass

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Access Control Bypass. An attacker can bypass security measures and have a low impact on integrity by exploiting this vulnerability. Remediation Upgrade...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of security policies. A low-privileged attacker can bypass security features by exploiting this vulnerability without us...