CVE-2024-32432 WordPress Ovic Addon Toolkit plugin <= 2.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ovic Team Ovic Addon Toolkit.This issue affects Ovic Addon Toolkit: from n/a through 2.6.1...

WordPress plugin Ovic Addon Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-24562

Name of the Vulnerable Software and Affected Versions Ovic Addon Toolkit versions 2.6.1 and earlier Description The issue is related to a Missing Authorization vulnerability in the Ovic Team Ovic Addon Toolkit. Recommendations For Ovic Addon Toolkit versions 2.6.1 and earlier, update to a version...

CVE-2024-32432: Missing Authorization

Missing Authorization vulnerability in Ovic Team Ovic Addon Toolkit.This issue affects Ovic Addon Toolkit: from n/a through 2.6.1...

flusity CMS 安全漏洞

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v2.33, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the addaddon.php component...

CVE-2024-32418

A remote code execution (RCE) vulnerability exists in flusity CMS v2.33 . The flaw is located within the add_addon.php component, allowing an unauthenticated remote attacker to execute arbitrary code. The impact is considered critical, with potential for high confidentiality, integrity, and avail...

PT-2024-24555 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity CMS version 2.33 Description: An issue in the software allows a remote attacker to execute arbitrary code via the add addon.php component. Recommendations: For version 2.33, consider disabling the add addon.php component until a patch...

PT-2024-24180

Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description An issue in the software allows a remote attacker to execute arbitrary code via a crafted script to the "edit addon post.php" component. Recommendations For version 2.33, consider disabling access to the...

flusity CMS 安全漏洞

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v.2.33, which originated from a vulnerability that allows remote attackers to execute arbitrary code by constructing the editaddonpost.php script...

CVE-2024-32572

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.6.0...

WordPress Plugin Element Pack Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Plugin Essential Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

NextMove Lite < 2.18.2 - Cross-Site Request Forgery

Description The NextMove Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.1. This is due to missing or incorrect nonce validation on the xladdoninstallation function. This makes it possible for unauthenticated attackers to install addons...

WordPress Ovic Addon Toolkit plugin <= 2.6.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Ovic Addon Toolkit versions = 2.6.1...

WordPress Ovic Addon Toolkit Plugin <= 2.6.1 is vulnerable to Broken Access Control

Software Ovic Addon Toolkit Type Plugin Vulnerable versions = 2.6.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32432 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7ad5ff183e69 Credits Nguyen Xuan Chien Required...

WordPress Premium Addons for Elementor plugin <= 4.10.16 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Premium Addons for Elementor versions = 4.10.16...

CVE-2024-2792

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widgets in all versions up to, and including, 1.13.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

CVE-2024-2348

The Gum Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Meta widget in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level acce...

CVE-2024-1974

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.6 via the render function. This makes it possible for authenticated attackers, with contributor access or higher, to read the contents of arbitrary files...

CVE-2024-2792 Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widgets in all versions up to, and including, 1.13.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...