WordPress plugin ProfileGrid  安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Premium Packages < 5.8.3 - Reflected Cross-Site Scripting

Description The Premium Packages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 5.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

PT-2024-23147 · W3 Eden · W3 Eden

Name of the Vulnerable Software and Affected Versions: W3 Eden, Inc. Premium Packages versions n/a through 5.8.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

WordPress Premium Packages Plugin <= 5.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Premium Packages Type Plugin Vulnerable versions = 5.8.2 Fixed in 5.8.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29924 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fd83d5609f73 Credits Yudistira Arya Required privile...

PT-2023-25680 · Unknown · Andrea Tarantini Menubar

Name of the Vulnerable Software and Affected Versions: Andrea Tarantini Menubar plugin versions = 5.8.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

WordPress Plugin Menubar 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2023-0302 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository radareorg/radare2 prior to 5.8.2...

PT-2023-16157 · Radare2 +1 · Radare2 +1

Name of the Vulnerable Software and Affected Versions: radare2 versions prior to 5.8.2 Description: The issue is related to a failure to sanitize special elements into a different plane, also known as Special Element Injection. This problem affects the radare2 GitHub repository. There is no...

CVE-2023-0302

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository radareorg/radare2 prior to 5.8.2...

radare2 code issue vulnerability (CNVD-2023-06084)

radare2 is a set of libraries and tools for working with binary files. radare2 versions prior to 5.8.2 are vulnerable to a code issue that stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

Null pointer dereference

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2...

radare2 代码问题漏洞

radare2 is a set of libraries and tools for working with binary files. radare2 versions prior to 5.8.2 are vulnerable to a code issue that stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

CVE-2022-4843 NULL Pointer Dereference in radareorg/radare2

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2...

PT-2022-28130 · Radare2 +1 · Radare2 +1

Name of the Vulnerable Software and Affected Versions: radare2 versions prior to 5.8.2 Description: The issue is a NULL Pointer Dereference in the GitHub repository radareorg/radare2. Recommendations: For versions prior to 5.8.2, update to version 5.8.2 or later to resolve the issue...

CVE-2022-4843 NULL Pointer Dereference in radareorg/radare2

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2...

CVE-2022-31781

Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service ReDoS in the way it handles Content Types. Specially crafted Content Types may cause catastrophic backtracking, taking exponential time to complete. Specifically, this is about the regular expression used on...

GHSA-VP4X-94FF-2CMV Cross-site scripting in forkcms

Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the "navigationtitle" parameter and the "title" parameter in /private/en/pages/add...

WordPress Core 5.8.2 - (WP_Query) SQL Injection Vulnerability

Exploit Title: WordPress Core 5.8.2 - 'WPQuery' SQL Injection Exploit Author: Aryan Chehreghani Vendor Homepage: https://wordpress.org Software Link: https://wordpress.org/download/releases Version: &nonce=a85a0c3bfa&...

WordPress <= 5.8.2 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by Ben Bidner in WordPress versions = 5.8.2. Solution Update WordPress to the latest available version at least 5.8.3...

WordPress <= 5.8.2 - Authenticated Object Injection in Multisites

Authenticated Object Injection in Multisites discovered by Simon Scannell SonarSource in WordPress versions = 5.8.2. Solution Update WordPress to the latest available version at least 5.8.3...