CVE-2024-34423

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phpbits Forty Four – 404 Plugin for WordPress allows Stored XSS.This issue affects Forty Four – 404 Plugin for WordPress: from n/a through 1.4...

CVE-2024-34423 WordPress Forty Four – 404 Plugin for WordPress plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phpbits Forty Four – 404 Plugin for WordPress allows Stored XSS.This issue affects Forty Four – 404 Plugin for WordPress: from n/a through 1.4...

CVE-2024-34423

CVE-2024-34423 is a Stored XSS in the Forty Four – 404 Plugin for WordPress (affected; WordPress plugin Forty Four – 404 Plugin for WordPress: from n/a through 1.4). The initial document includes CVSS 3.1 details (AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L; base score 5.9) and notes on the vulnerability...

CVE-2024-34423 WordPress Forty Four – 404 Plugin for WordPress plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phpbits Forty Four – 404 Plugin for WordPress allows Stored XSS.This issue affects Forty Four – 404 Plugin for WordPress: from n/a through 1.4...

PT-2024-25876 · WordPress · Forty Four – 404 Plugin

Name of the Vulnerable Software and Affected Versions: Forty Four – 404 Plugin for WordPress versions 1.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

CVE-2024-34471

An issue was discovered in HSC Mailinspector 5.2.17-3. A Path Traversal vulnerability resulting in file deletion exists in the mliRealtimeEmails.php file. The filename parameter in the export HTML functionality does not properly validate the file location, allowing an attacker to read and delete...

WordPress Forty Four – 404 Plugin for WordPress Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Forty Four – 404 Plugin for WordPress Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34423 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 76d94c29d697 Credits Cronus Required...

CVE-2024-34471

An issue was discovered in HSC Mailinspector 5.2.17-3. A Path Traversal vulnerability resulting in file deletion exists in the mliRealtimeEmails.php file. The filename parameter in the export HTML functionality does not properly validate the file location, allowing an attacker to read and delete...

CVE-2024-32559

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post allows Reflected XSS.This issue affects WP 404 Auto Redirect to Similar Post: from n/a through 1.0.4...

CVE-2024-32559

CVE-2024-32559 affects the WP 404 Auto Redirect to Similar Post WordPress plugin. It is a Reflected XSS vulnerability caused by improper input neutralization during web page generation, impacting WP-404 Auto Redirect to Similar Post versions up to 1.0.4. The associated entry indicates a patched s...

WordPress Plugin WP 404 Auto Redirect to Similar Post 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WP 404 Auto Redirect to Similar Post A...

DEBIAN-CVE-2023-5692

WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirectguess404permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publiclyqueryable' post status has been set to 'false'...

mpelqen.com Cross Site Scripting vulnerability OBB-3904804

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Core plugin <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink vulnerability

Sensitive Information Exposure via redirectguess404permalink vulnerability discovered by Francesco Carlucci in WordPress core versions = 6.4.3...

PT-2024-14827 · WordPress +1 · Wordpress +1

Name of the Vulnerable Software and Affected Versions: WordPress Core versions up to, and including, 6.4.3 Description: The issue allows unauthenticated attackers to expose the slug of a custom post whose publicly queryable post status has been set to 'false' via the redirect guess 404 permalink...

WordPress 404 Solution Plugin < 2.35.8 is vulnerable to SQL Injection

Software 404 Solution Type Plugin Vulnerable versions 2.35.8 Fixed in 2.35.8 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-1068 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID a596100a0999 Credits Sumit Patel Required privilege Administrator Publishe...

Sql injection

The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins...

CVE-2024-1068 404 Solution < 2.35.8 - Admin+ SQL Injection

The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins...

CVE-2024-1068

CVE-2024-1068 affects the WordPress plugin 404 Solution prior to version 2.35.8 . The issue is an improper sanitisation/escaping of a parameter used in a SQL statement, enabling a SQL injection . The exploit is described as usable by high-privilege users (e.g., admins) and is supported by multipl...

CVE-2024-1068 404 Solution < 2.35.8 - Admin+ SQL Injection

The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins...