279 matches found
PT-2025-5524 · Unknown · Gwolle Guestbook
Name of the Vulnerable Software and Affected Versions: Gwolle Guestbook versions through 4.7.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...
CVE-2025-24644
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels print-invoices-packing-slip-labels-for-woocommerce allows Stored XSS.This issue affects WooCommerce PDF Invoice...
CVE-2025-24644 WordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels print-invoices-packing-slip-labels-for-woocommerce allows Stored XSS.This issue affects WooCommerce PDF Invoice...
WordPress plugin WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WooCommerce PDF Invoices,...
CVE-2024-37444 WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through = 4.7.1...
WordPress plugin Defender Security 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress PublishPress Authors Plugin <= 4.7.1 is vulnerable to Privilege Escalation
Software PublishPress Authors Type Plugin Vulnerable versions = 4.7.1 Fixed in 4.7.2 OWASP Top 10 A4: Insecure Design Classification Privilege Escalation CVE CVE-2024-9215 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID dc9bff13d8f2 Credits wesley wcraft Required...
CVE-2024-8484
The REST API TO MiniProgram plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/watch-life-net/v1/comment/getcomments REST API endpoint in all versions up to, and including, 4.7.1 due to insufficient escaping on the user supplied parameter and lack of...
WordPress plugin REST API TO MiniProgram 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2024-39050 · WordPress · Rest Api To Miniprogram
Name of the Vulnerable Software and Affected Versions: REST API TO MiniProgram plugin for WordPress versions up to, and including, 4.7.1 Description: The issue is related to SQL Injection via the order parameter of the "/wp-json/watch-life-net/v1/comment/getcomments" API endpoint. This is due to...
CVE-2024-46649
eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder...
CVE-2024-46646
eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file...
CVE-2024-46646
CVE-2024-46646 affects eNMS up to 4.7.1. The vulnerability is a Directory Traversal flaw exploitable via the "/download/file" endpoint, as described across multiple sources (Red Hat, NVD, OSV, CNNVD, CVE list). The root cause details are not explicitly provided beyond the endpoint and traversal n...
CVE-2024-46649
eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder...
CVE-2024-46649
eNMS up to 4.7.1 is vulnerable to Directory Traversal via the download/folder path. The root cause is a path handling issue that can allow accessing files outside the intended directory. Impact stated across connected feeds includes potential exposure of sensitive files; exploitation details are ...
CVE-2024-46649
eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder...
PT-2024-32094 · Enms · Enms
Name of the Vulnerable Software and Affected Versions: eNMS versions up to 4.7.1 Description: The issue is a Directory Traversal vulnerability, which occurs via the download/folder path. Recommendations: For versions up to 4.7.1, consider restricting access to the download/folder path as a...
CVE-2024-46644
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via editfile...