21 matches found
Images to WebP < 1.9 - Authenticated Local File Inclusion
The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...
ATHDH_CVE_2022_24644
This repository does not have a README...
CVE-2026-24644
creationtimestamp| type| source ---|---|--- 2026-01-24 07:03:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5njxs44m2h...
PT-2026-4762
CVE-2026-24644 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2026-24644 Published : Jan. 24, 2026, 4:15 a.m. | 1 hour, 8 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2021-24644
creationtimestamp| type| source ---|---|--- 2025-09-11 13:37:27+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24644.yaml 2025-09-16 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lyy7rtsuy327...
CVE-2021-24644
The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...
CVE-2025-24644
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels print-invoices-packing-slip-labels-for-woocommerce allows Stored XSS.This issue affects WooCommerce PDF Invoice...
CVE-2025-24644 WordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels print-invoices-packing-slip-labels-for-woocommerce allows Stored XSS.This issue affects WooCommerce PDF Invoice...
CVE-2025-24644
CVE-2025-24644 affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels (WebToffee) versions up to 4.7.1. Root cause: improper neutralization of input during web page generation, enabling stored XSS. Public references indicate remediation to version 4.7.2 (update requir...
CVE-2025-24644 WordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels print-invoices-packing-slip-labels-for-woocommerce allows Stored XSS.This issue affects WooCommerce PDF Invoice...
CVE-2022-24644
creationtimestamp| type| source ---|---|--- 2022-06-02 07:35:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2370 2023-01-14 12:57:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7548 2023-01-15 14:05:50+00:00| published-proof-of-concept|...
CVE-2022-24644
ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse...
CVE-2022-24644
ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse...
CVE-2022-24644
CVE-2022-24644 affects ZZ Inc. KeyMouse Windows 3.08 and earlier. The vulnerability is a remote code execution that can be triggered when an affected KeyMouse installation performs an unauthenticated update. The root cause is tied to the update process, and exploitation requires triggering a prod...
Exploit for Download of Code Without Integrity Check in Zzinc Keymouse_Firmware
CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticat...
CVE-2021-24644
The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...
CVE-2021-24644
The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...
CVE-2021-24644
The Images to WebP WordPress plugin (versions before 1.9 ) is vulnerable to an Authenticated Local File Inclusion (LFI) issue. The root cause is the failure to validate or sanitize the tab parameter before passing it to the include() function. An authenticated attacker can exploit this via path t...
CVE-2021-24644 Images to WebP < 1.9 - Authenticated Local File Inclusion
The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...