2626 matches found
CVE-2017-18489: Improper Neutralization of Input During Web Page Generation
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS...
CVE-2019-14986: Undefined Security Weakness
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthenticated attackers with access to the web interface, because features such as File-Browser and Shell Command as well as "Set root password" are exposed...
CVE-2019-14948
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure...
CVE-2019-14948
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure...
CVE-2019-14948: Improper Neutralization of Input During Web Page Generation
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure...
PT-2019-13885 · Woocommerce · Woocommerce Product Add-Ons
Name of the Vulnerable Software and Affected Versions: woocommerce-product-addon plugin version prior to 18.4 Description: The issue allows for XSS via an import of a new meta data structure. Recommendations: For versions prior to 18.4, update to version 18.4 or later to resolve the issue...
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Multiple Issues
Unauthenticated option changes vulnerability that could allow an attacker to redirect all pages and posts of the blog to a malicious website, as well as an authenticated options export/deletion vulnerability...
CVE-2017-18455
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...
CVE-2017-18455
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...
Code injection
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...
CVE-2017-18455
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...
CVE-2017-18455
CVE-2017-18455 affects cPanel prior to 62.0.17, where addon domain conversion did not require a package for resellers (SEC-208). The available connected documents confirm the same description across Red Hat, CVE lists, and other feeds, but do not provide explicit exploitation details or a cited r...
CVE-2017-18420
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing SEC-269...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18411
The CVE-2017-18411 issue concerns cPanel’s addon domain conversion feature (pre-67.9999.103). The affected component is the addon domain conversion workflow, which can copy all MySQL databases to the newly created account, per SEC-285. The available documents describe the vulnerability impact as ...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18455: Undefined Security Weakness
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...