WordPress plugin Image Hover Effects with Carousel security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-27643 · Unknown · Image Hover Effects - Caption Hover With Carousel

Name of the Vulnerable Software and Affected Versions: Image Hover Effects - Caption Hover with Carousel versions 3.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...

CVE-2024-4390

The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to Arbitrary Nonce Generation in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers with contributor access and above, to generate a valid nonce for any WordPress action/functio...

WordPress Plugin Slider and Carousel slider by Depicter Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A security vulnerability exists ...

OPENSUSE-SU-2024:10883-1 jsr-305-3.0.2-1.2 on GA media

These are all security issues fixed in the jsr-305-3.0.2-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11623-1 libruby3_0-3_0-3.0.2-1.1 on GA media

These are all security issues fixed in the libruby30-30-3.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

Wordpress Folders Pro plugin <= 3.0.2 - Directory Traversal via handle_folders_file_upload vulnerability

Directory Traversal via handlefoldersfileupload vulnerability discovered by Colin Xu in WordPress Plugin Folders Pro versions = 3.0.2...

WordPress plugin Folders Pro security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Fortinet FortiClient in OpenSSL library (FG-IR-22-059)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-059 advisory. - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for...

CVE-2023-51679

Missing Authorization vulnerability in BulkGate BulkGate SMS Plugin for WooCommerce.This issue affects BulkGate SMS Plugin for WooCommerce: from n/a through 3.0.2...

WordPress plugin BulkGate SMS Plugin for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-5001

The Image Hover Effects for Elementor with Lightbox and Flipbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id', 'oxiaddonsftitletag', and 'contentdescriptiontag' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and outpu...

WordPress plugin Image Hover Effects for Elementor with Lightbox and Flipbox security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Tmont Pug 安全漏洞

Tmont Pug is a Tmont open source application. It provides a way to optimize html. A security vulnerability exists in Tmont Pug 3.0.2 and prior versions that stems from the presence of untrusted input that allows execution of arbitrary JavaScript code...

WordPress Folders Pro plugin <= 3.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User First Name and Last Name vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via User First Name and Last Name vulnerability discovered by mike harris in WordPress Plugin Folders versions = 3.0.2...

WordPress plugin WP Cookie Consent 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

TaoCMS 安全漏洞

TaoCMS is a Chinese micro CMS Content Management System. A security vulnerability exists in TaoCMS version v.3.0.2. A remote attacker can exploit this vulnerability to execute arbitrary code and obtain sensitive information via the include/model/file.php component...

PT-2024-25213 · Taocms · Taocms

Name of the Vulnerable Software and Affected Versions: TaoCMS version 3.0.2 Description: A Directory Traversal issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the include/model/file.php component. Recommendations: For TaoCMS version 3.0.2, consider...

PT-2024-24307 · Typps · Typps Calendarista Basic Edition

Name of the Vulnerable Software and Affected Versions: Typps Calendarista Basic Edition versions 3.0.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations:...

PT-2024-24557 · Unknown · Mww Disclaimer Buttons

Name of the Vulnerable Software and Affected Versions: MWW Disclaimer Buttons versions 3.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in MWW Disclaimer Buttons...