3988 matches found
Exploit for Missing Authentication for Critical Function in Webcraftic Woody_Ad_Snippets
CVE-2019-15858 Unauthenticated Remote Code Execution at Wood...
WordPress Woody ad snippets Plugin < 2.2.5 Multiple Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webcraftic:woodyadsnippets"; ifdescription...
WordPress Woody ad snippets plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Woody ad snippets is used in one of the pages to add ads to the plugin. A cross-site scripting vulnerability exists in the WordPress...
CVE-2019-15858
admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution...
CVE-2019-15858
admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution...
CVE-2019-15858
admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution...
CVE-2019-15858
CVE-2019-15858 concerns the WordPress plugin Woody Ad Snippets (before 2.2.5). The vulnerability arises in admin/includes/class.import.snippet.php, where an unauthenticated options import function can be abused to store a payload, enabling cross‑site scripting and, in turn, remote code execution....
PT-2019-14438
Name of the Vulnerable Software and Affected Versions Woody ad snippets plugin versions prior to 2.2.5 Description The issue allows unauthenticated options import, which can be exploited to store an XSS payload for remote code execution. Recommendations For versions prior to 2.2.5, update to...
CVE-2019-15858: Missing Authentication for Critical Function
admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution...
WordPress ad-inserter plugin path traversal vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ad-inserter is an ad management plugin that is used in this period. A path traversal vulnerability exists in the WordPress ad-inserter...
WordPress ad-inserter plugin input validation error vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ad-inserter is an ad management plugin that is used in this period. WordPress ad-inserter plugin has an input validation error...
WordPress corner-ad plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. corner-ad is a web advertising plugin used in it. A cross-site scripting vulnerability exists in the WordPress corner-ad plugin. An...
Google Proposes 'Privacy Sandbox' to Develop Privacy-Focused Ads
Google today announced a new initiative—called Privacy Sandbox —in an attempt to develop a set of open standards that fundamentally enhances privacy on the web while continuing to support a free, open and democratic Internet through digital advertisements. A lot of websites on the Internet today,...
WordPress ad-buttons plugin cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress ad-buttons plugin. An attacker can exploit this...
CVE-2017-18579
The corner-ad plugin before 1.0.8 for WordPress has XSS...
CVE-2017-18579
The corner-ad plugin before 1.0.8 for WordPress has XSS...
Google Launches Open-Source Browser Extension for Ad Transparency
Google is launching an experimental, open-source browser extension aimed at increasing transparency around online advertising by displaying information about the ads that are shown to users. The browser extension is an integral part of a new Google initiative announced Thursday to develop a set o...
CVE-2017-18579
The corner-ad plugin before 1.0.8 for WordPress has XSS...
CVE-2017-18579
CVE-2017-18579 affects the Corner Ad WordPress plugin prior to 1.0.8. The vulnerability is a cross-site scripting (XSS) flaw in the plugin. The CNVD entry states that an attacker can exploit this vulnerability to execute client-side code; NVD details show a network-facing vector with at least par...