CVE-2024-40430

...

CVE-2024-40430

...

CVE-2024-40430

CVE-2024-40430 is rejected and not an active vulnerability entry.

CVE-2024-28757 affecting package expat for versions less than 2.6.2-1

CVE-2024-28757 affecting package expat for versions less than 2.6.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-52426 affecting package expat for versions less than 2.6.2-1

CVE-2023-52426 affecting package expat for versions less than 2.6.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-52425 affecting package expat for versions less than 2.6.2-1

CVE-2023-52425 affecting package expat for versions less than 2.6.2-1. An upgraded version of the package is available that resolves this issue...

WordPress WooCommerce Social Login plugin <= 2.6.2 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by István Márton in WordPress Plugin WooCommerce Social Login versions = 2.6.2...

WordPress WooCommerce Social Login Plugin <= 2.6.2 is vulnerable to PHP Object Injection

Software WooCommerce Social Login Type Plugin Vulnerable versions = 2.6.2 Fixed in 2.6.3 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-5871 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 26c69110d799 Credits István Márton Required privilege...

WordPress Custom Field Template Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)

Software Custom Field Template Type Plugin Vulnerable versions = 2.6.1 Fixed in 2.6.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-0653 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID fe4e0cf2229e Credits Sh Required privilege Administrat...

WordPress Plugin Jeg Elementor Kit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

PT-2024-22721 · Unknown · Jeg Elementor Kit

Name of the Vulnerable Software and Affected Versions: Jeg Elementor Kit versions through 2.6.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

WordPress Jeg Elementor Kit Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)

Software Jeg Elementor Kit Type Plugin Vulnerable versions = 2.6.2 Fixed in 2.6.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29101 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2988502bfa29 Credits Khalid Yusuf Required privilege...

WordPress Tutor LMS Plugin <= 2.6.1 is vulnerable to SQL Injection

Software Tutor LMS Type Plugin Vulnerable versions = 2.6.1 Fixed in 2.6.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-1751 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 3833befb3021 Credits Muhammad Hassham Nagori Required privilege Subscriber...

AZL-34208 CVE-2023-52426 affecting package expat for versions less than 2.6.2-2

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

AZL-34207 CVE-2023-52425 affecting package expat for versions less than 2.6.2-2

libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple buffer fills are needed...

TinyXML Security Vulnerability

TinyXML is a simple, small and minimal C++ Xml parser. A security vulnerability exists in TinyXML 2.6.2 and earlier versions, which stems from a security flaw in the file tinyxmlparser.cpp...

CVE-2023-47519 WordPress WooCommerce Product Table Lite Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WC Product Table WooCommerce Product Table Lite.This issue affects WooCommerce Product Table Lite: from n/a through 2.6.2...

PT-2023-23149 · Unknown · Chronosly Events Calendar

Name of the Vulnerable Software and Affected Versions: Chronosly Events Calendar plugin versions = 2.6.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

CVE-2022-47172

CVE-2022-47172 describes a Cross-Site Request Forgery (CSRF) vulnerability in the HasThemes ShopLentor plugin for WordPress, affecting versions up to 2.6.2. The connected documents consistently identify the vulnerable component as the ShopLentor plugin and confirm the affected range ≤ 2.6.2, with...

PT-2023-15215 · Hasthemes · Shoplentor

Name of the Vulnerable Software and Affected Versions: HasThemes ShopLentor plugin versions = 2.6.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...