Lucene search
+L

373 matches found

CNNVD
CNNVD
added 2024/05/22 12:00 a.m.7 views

WordPress plugin Ninja Beaver Add-ons for Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.6AI score0.00267EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2024/03/27 12:54 p.m.47 views

Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions

A now-patched security flaw in the Microsoft Edge web browser could have been abused to install arbitrary extensions on users' systems and carry out malicious actions. "This flaw could have allowed an attacker to exploit a private API, initially intended for marketing purposes, to covertly instal...

6.5CVSS6.7AI score0.31954EPSS
SaveExploits1
NVD
NVD
added 2024/03/21 3:16 p.m.28 views

CVE-2024-27994

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through = 4.5.0...

7.1CVSS6.9AI score0.00398EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/21 3:03 p.m.20 views

CVE-2024-27994 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through = 4.5.0...

7.1CVSS7.2AI score0.00398EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/21 3:03 p.m.79 views

CVE-2024-27994

CVE-2024-27994 is an XSS vulnerability in YITH WooCommerce Product Add-Ons (versions n/a–4.5.0) that allows Reflected Cross-Site Scripting. Public details in connected sources confirm the affected plugin and version range, and Patch Status shows the issue has been patched in subsequent releases. ...

7.1CVSS7.2AI score0.00398EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/21 3:03 p.m.37 views

CVE-2024-27994 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through = 4.5.0...

7.1CVSS7.1AI score0.00398EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/21 12:00 a.m.12 views

WordPress Plugin YITH WooCommerce Product Add-Ons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS7.3AI score0.00398EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/21 12:00 a.m.17 views

PT-2024-22192 · Yith · Yith Woocommerce Product Add-Ons

Name of the Vulnerable Software and Affected Versions: YITH WooCommerce Product Add-Ons versions through 4.5.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This can occur during we...

7.1CVSS9.3AI score0.00398EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
added 2024/03/15 12:00 a.m.8 views

VulnCheck KEV: CVE-2024-27994

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Product Add-Ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.5.0...

7.3AI score0.00398EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/03/15 12:00 a.m.25 views

WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.5.0 is vulnerable to Cross Site Scripting (XSS)

Software YITH WooCommerce Product Add-Ons Type Plugin Vulnerable versions = 4.5.0 Fixed in 4.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-27994 Patch priority Medium CVSS severity Medium 7.1 Developer YITH PSID 8464da6f5a09 Credits Yudistira Arya Required...

7.1CVSS6.5AI score0.00398EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/12/31 11:15 a.m.12 views

CVE-2023-49777

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0...

8.8CVSS5.8AI score0.0069EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/31 11:15 a.m.34 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0...

6.5CVSS7.1AI score0.0069EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/31 10:11 a.m.79 views

CVE-2023-49777

CVE-2023-49777 – YITH WooCommerce Product Add-Ons suffers a Deserialization of Untrusted Data vulnerability (Affects: 4.3.0 and earlier). Root cause: untrusted data deserialization in the plugin. Impact/ exploitation details are not provided beyond deserialization risk in the connected Red Hat en...

9.1CVSS8.5AI score0.0069EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/31 10:11 a.m.44 views

CVE-2023-49777 WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0...

9.1CVSS9.4AI score0.0069EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/31 12:00 a.m.11 views

WordPress Plugin YITH WooCommerce Product Add-Ons Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin YITH...

9.1CVSS6.8AI score0.0069EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/28 11:15 a.m.14 views

CVE-2023-32795

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...

7.2CVSS7.3AI score0.00672EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/28 11:15 a.m.29 views

CVE-2023-32795

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...

8.2CVSS0.00672EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/28 11:15 a.m.25 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...

5.8CVSS7.2AI score0.00672EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/28 10:43 a.m.76 views

CVE-2023-32795

CVE-2023-32795 affects the WordPress plugin WooCommerce Product Add-Ons (

8.2CVSS7.5AI score0.00672EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/28 10:43 a.m.44 views

CVE-2023-32795 WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...

8.2CVSS8.4AI score0.00672EPSS
SaveExploits0References1
Rows per page
Query Builder