3591 matches found
WordPress Themify Event Post Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)
Software Themify Event Post Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30440 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9d185b777884 Credits Dhabaleshwar Das Required privilege...
WordPress WP Cost Estimation & Payment Forms Builder Plugin <= 10.1.75 is vulnerable to SQL Injection
Software WP Cost Estimation & Payment Forms Builder Type Plugin Vulnerable versions = 10.1.75 Fixed in 10.1.76 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30489 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID b42e5deb44b6 Credits Rafie Muhammad...
WordPress Paid Memberships Pro – Payfast Gateway Add On Plugin <= 1.4.1 is vulnerable to Sensitive Data Exposure
Software Paid Memberships Pro – Payfast Gateway Add On Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-30514 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID...
WordPress Element Pack Elementor Addons Plugin <= 5.5.3 is vulnerable to SQL Injection
Software Element Pack Elementor Addons Type Plugin Vulnerable versions = 5.5.3 Fixed in 5.5.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30496 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 3d0133376896 Credits Rafie Muhammad Patchstack Required...
WordPress Sponsors Plugin <= 3.5.1 is vulnerable to Cross Site Scripting (XSS)
Software Sponsors Type Plugin Vulnerable versions = 3.5.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30483 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fb48b8770a30 Credits Ray Wilson Required privilege Contributor...
CVE-2023-42938
creationtimestamp| type| source ---|---|--- 2024-03-14 20:26:56+00:00| seen| https://t.me/ctinow/208099 2024-03-14 20:31:57+00:00| seen| https://t.me/ctinow/208113 2025-03-28 21:29:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9471...
CVE-2019-1481
creationtimestamp| type| source ---|---|--- 2024-03-09 15:16:28+00:00| seen| https://t.me/ctinow/203964...
CVE-2019-1474
creationtimestamp| type| source ---|---|--- 2024-03-09 14:46:28+00:00| seen| https://t.me/ctinow/203954...
FreeBSD : electron{27,28} -- vulnerability in libxml2 (e74da31b-276a-4a22-9772-17dd42b97559)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e74da31b-276a-4a22-9772-17dd42b97559 advisory. - An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader...
CVE-2023-45596
creationtimestamp| type| source ---|---|--- 2024-03-05 13:28:15+00:00| seen| https://t.me/ctinow/200217...
CVE-2024-24903
creationtimestamp| type| source ---|---|--- 2024-03-01 15:27:10+00:00| seen| https://t.me/ctinow/197703 2024-03-01 15:31:28+00:00| seen| https://t.me/ctinow/197721...
GHSA-6MX3-9QFH-77GJ
creationtimestamp| type| source ---|---|--- 2024-02-29 23:56:28+00:00| seen| https://t.me/ctinow/197133...
CentOS 9 : dbus-broker-28-6.el9
The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dbus-broker-28-6.el9 build changelog. - An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contai...
CVE-2024-26476
creationtimestamp| type| source ---|---|--- 2024-02-28 23:27:08+00:00| seen| https://t.me/ctinow/195977...
CVE-2024-26450
creationtimestamp| type| source ---|---|--- 2024-02-28 23:27:07+00:00| seen| https://t.me/ctinow/195976...
CVE-2024-25867
creationtimestamp| type| source ---|---|--- 2024-02-28 23:27:04+00:00| seen| https://t.me/ctinow/195973...
CVE-2021-47050
creationtimestamp| type| source ---|---|--- 2024-02-28 22:41:07+00:00| seen| https://t.me/ctinow/195942...
CVE-2024-25859
creationtimestamp| type| source ---|---|--- 2024-02-28 21:27:01+00:00| seen| https://t.me/ctinow/195883 2024-02-28 21:27:11+00:00| seen| https://t.me/ctinow/195893...
campidron.org Cross Site Scripting vulnerability OBB-3861524
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...