MINI-9287-4939-RVVH

Bulletin has no description...

MINI-4939-CGP2-4236

Bulletin has no description...

CVE-2023-4939

The SALESmanago plugin for WordPress is vulnerable to Log Injection in versions up to, and including, 3.2.4. This is due to the use of a weak authentication token for the /wp-json/salesmanago/v1/callbackApiV3 API endpoint which is simply a SHA1 hash of the site URL and client ID found in the page...

CVE-2014-4939

SQL injection vulnerability in the ENL Newsletter enl-newsletter plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php...

CVE-2025-4939

A vulnerability classified as problematic was found in PHPGurukul Credit Card Application Management System 1.0. This vulnerability affects unknown code of the file /admin/new-ccapplication.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has...

CVE-2025-4939

creationtimestamp| type| source ---|---|--- 2025-05-19 17:13:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zaxgh52j...

CVE-2025-4939 PHPGurukul Credit Card Application Management System new-ccapplication.php cross site scripting

A vulnerability classified as problematic was found in PHPGurukul Credit Card Application Management System 1.0. This vulnerability affects unknown code of the file /admin/new-ccapplication.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has...

CVE-2025-4939 PHPGurukul Credit Card Application Management System new-ccapplication.php cross site scripting

A vulnerability classified as problematic was found in PHPGurukul Credit Card Application Management System 1.0. This vulnerability affects unknown code of the file /admin/new-ccapplication.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has...

Security Bulletin: A security vulnerability has been identified in IBM Jazz for Service Management shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2020-4939)

Summary IBM Jazz for Service Management JazzSM is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting JazzSM has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

CGA-CFC3-4939-VPQC

Bulletin has no description...

CVE-2024-4939 Weaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode

The Weaver Xtreme Theme Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's div shortcode in all versions up to, and including, 6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

WordPress Weaver Xtreme Theme Support Plugin <= 6.4 is vulnerable to Cross Site Scripting (XSS)

Software Weaver Xtreme Theme Support Type Plugin Vulnerable versions = 6.4 Fixed in 6.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4939 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bb2346908882 Credits Peter Thaleikis...

CVE-2023-4939

creationtimestamp| type| source ---|---|--- 2023-10-21 12:35:54+00:00| seen| https://t.me/cibsecurity/72732...

CVE-2023-4939

The SALESmanago plugin for WordPress is vulnerable to Log Injection in versions up to, and including, 3.2.4. This is due to the use of a weak authentication token for the /wp-json/salesmanago/v1/callbackApiV3 API endpoint which is simply a SHA1 hash of the site URL and client ID found in the page...

CVE-2023-4939 SALESmanago <= 3.2.4 - Log Injection via Weak Authentication Token

The SALESmanago plugin for WordPress is vulnerable to Log Injection in versions up to, and including, 3.2.4. This is due to the use of a weak authentication token for the /wp-json/salesmanago/v1/callbackApiV3 API endpoint which is simply a SHA1 hash of the site URL and client ID found in the page...

CVE-2023-4939

The SALESmanago WordPress plugin (

WordPress SALESmanago Plugin <= 3.2.4 is vulnerable to Other Vulnerability Type

Software SALESmanago Type Plugin Vulnerable versions = 3.2.4 Fixed in 3.2.5 OWASP Top 10 A3: Injection Classification Other Vulnerability Type CVE CVE-2023-4939 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 32669bebc244 Credits Francesco Carlucci Required privilege...

WordPress WCFM Membership Plugin <= 2.10.0 is vulnerable to Privilege Escalation

Software WCFM Membership Type Plugin Vulnerable versions = 2.10.0 Fixed in 2.10.1 OWASP Top 10 A5: Broken Access Control Classification Privilege Escalation CVE CVE-2022-4939 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID d39bb3379dad Credits Chloe Chamberland Required...

CVE-2022-4939

creationtimestamp| type| source ---|---|--- 2023-04-05 22:41:11+00:00| seen| https://t.me/cibsecurity/61497 2026-07-29 12:00:42+00:00| seen| https://t.me/CVEhub/10081 2026-07-30 00:01:10+00:00| seen| https://t.me/CVEhub/10081 2026-07-31 08:00:04+00:00| published-proof-of-concept|...

CVE-2022-4939

CVE-2022-4939 affects the WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress. A missing capability check on the wp_ajax_nopriv_wcfm_ajax_controller AJAX action that controls membership settings allows unauthenticated users to modify the membership registrat...