Lucene search
+L

13584 matches found

NVD
NVD
•added 2024/12/09 1:15 p.m.•31 views

CVE-2023-26520

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

5.3CVSS0.00442EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:31 a.m.•15 views

CVE-2023-26520 WordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget advanced-text-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through = 2.1.2...

5.3CVSS8AI score0.00442EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:31 a.m.•64 views

CVE-2023-26520 WordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

5.3CVSS0.00442EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•6 views

PT-2024-12098

Name of the Vulnerable Software and Affected Versions Max Chirkov Advanced Text Widget versions 2.1.2 and earlier Description The issue is related to missing authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations For Max Chirkov Advanced Tex...

5.3CVSS7.9AI score0.00442EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•19 views

WordPress plugin Advanced Text Widget has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS7.7AI score0.00442EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•10 views

CVE-2023-26520: Missing Authorization

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

5.3CVSS8.1AI score0.00442EPSS
SaveExploits0References1
Fedora
Fedora
•added 2024/12/07 7:37 a.m.•33 views

[SECURITY] Fedora 41 Update: uv-0.5.5-2.fc41

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

8.4CVSS7.4AI score0.01572EPSS
SaveExploits1
Fedora
Fedora
•added 2024/12/07 6:06 a.m.•31 views

[SECURITY] Fedora 40 Update: uv-0.5.5-2.fc40

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

8.4CVSS7.4AI score0.01572EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2024/12/07 12:00 a.m.•15 views

CVE-2024-1543

...

5.5CVSS5.8AI score0.00185EPSS
SaveExploits0
NVD
NVD
•added 2024/12/06 2:15 p.m.•31 views

CVE-2024-54210

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codexshaper Advanced Element Bucket Addons for Elementor cs-element-bucket allows Stored XSS.This issue affects Advanced Element Bucket Addons for Elementor: from n/a through = 1.0.2...

6.5CVSS0.00248EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/06 1:07 p.m.•60 views

CVE-2024-54210

CVE-2024-54210 describes a stored XSS in WordPress plugin Advanced Element Bucket Addons for Elementor (CodexShaper) due to improper input neutralization during web page generation. Affected: versions up to 1.0.2 (inclusive). The connected Red Hat and CVE references corroborate the stored XSS vul...

6.5CVSS8.4AI score0.00248EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/06 1:07 p.m.•20 views

CVE-2024-54210 WordPress Advanced Element Bucket Addons for Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexShaper Advanced Element Bucket Addons for Elementor allows Stored XSS.This issue affects Advanced Element Bucket Addons for Elementor: from n/a through 1.0.2...

6.5CVSS8.4AI score0.00248EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2024/12/06 11:00 a.m.•14 views

Conquering the Complexities of Modern BCDR

The modern business landscape is thrilling yet daunting. Rapidly evolving technology, persistent cyberthreats and escalating operational complexities make data protection and seamless business continuity challenging for businesses of all sizes. Your organization needs robust security measures tha...

7.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/12/06 12:00 a.m.•7 views

PT-2024-36088

Name of the Vulnerable Software and Affected Versions: CodexShaper Advanced Element Bucket Addons for Elementor versions 1.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored X...

6.5CVSS8.3AI score0.00248EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•9 views

CVE-2024-54210: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codexshaper Advanced Element Bucket Addons for Elementor cs-element-bucket allows Stored XSS.This issue affects Advanced Element Bucket Addons for Elementor: from n/a through = 1.0.2...

6.5CVSS8.6AI score0.00248EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/05 10:26 p.m.•22 views

WordPress Advanced Options Editor plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Advanced Options Editor versions = 1.0...

7.1CVSS6.1AI score0.00287EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/12/05 8:25 p.m.•14 views

WordPress Advanced Control Manager plugin <= 2.16.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Advanced Control Manager for WordPress by ItalyStrap versions = 2.16.0...

7.1CVSS6.1AI score0.00436EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2024/12/05 7:46 p.m.•38 views

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.1 bug fixes and container updates

Red Hat Advanced Cluster Management for Kubernetes 2.12.1 General Availability release images, which provide enhancements, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS ba...

7.5CVSS6.6AI score0.00932EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/12/03 3:15 p.m.•23 views

CVE-2024-11391

The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'classfmaconnector.php' file in all versions up to, and including, 5.2.10. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

7.5CVSS8.8AI score0.00701EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/12/03 1:26 a.m.•20 views

WordPress Advanced File Manager plugin <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Joshua Provoste in WordPress Plugin Advanced File Manager versions = 5.2.10...

7.5CVSS8.4AI score0.00701EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder