Lucene search
+L

1572 matches found

NVD
NVD
•added 2024/04/07 6:15 p.m.•22 views

CVE-2024-31286

Unrestricted Upload of File with Dangerous Type vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a before 8.6.03.005...

9.9CVSS9.6AI score0.00862EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/07 5:30 p.m.•80 views

CVE-2024-31286

CVE-2024-31286 : WP Photo Album Plus (WordPress plugin) has an Unrestricted Upload of File with Dangerous Type vulnerability affecting WP Photo Album Plus versions prior to 8.6.03.005. The Wordfence vulnerability entry for this CVE notes the issue as an authenticated/unauthorized file upload flaw...

9.9CVSS8.6AI score0.00862EPSS
SaveIn wildExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/07 5:30 p.m.•14 views

CVE-2024-31286 WordPress WP Photo Album Plus plugin < 8.6.03.005 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a before 8.6.03.005...

9.9CVSS8.6AI score0.00862EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/07 5:30 p.m.•36 views

CVE-2024-31286 WordPress WP Photo Album Plus plugin < 8.6.03.005 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a before 8.6.03.005...

9.9CVSS9.6AI score0.00862EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•10 views

WordPress Plugin WP Photo Album Plus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in...

9.9CVSS8.5AI score0.00862EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•0 views

CVE-2024-31286: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a before 8.6.03.005...

9.9CVSS5.8AI score0.00862EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•15 views

PT-2024-23932 · WordPress · Wp Photo Album Plus

Name of the Vulnerable Software and Affected Versions: WP Photo Album Plus versions prior to 8.6.03.005 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the WP Photo Album Plus software. This allows for the upload of files with potentially...

9.9CVSS9.5AI score0.00862EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2024/04/05 9:46 a.m.•9 views

WordPress WP Photo Album Plus plugin < 8.6.03.005 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin WP Photo Album Plus versions 8.6.03.005...

9.9CVSS7AI score0.00862EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/05 12:00 a.m.•18 views

WordPress WP Photo Album Plus Plugin < 8.6.03.005 is vulnerable to Arbitrary File Upload

Software WP Photo Album Plus Type Plugin Vulnerable versions 8.6.03.005 Fixed in 8.6.03.005 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-31286 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID b5fb22d21826 Credits stealthcopter Required...

9.9CVSS6.8AI score0.00862EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/03/31 8:15 p.m.•31 views

CVE-2024-30550

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Reflected XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

7.1CVSS6.9AI score0.00398EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/31 8:15 p.m.•10 views

CVE-2024-30550

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Reflected XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

6.1CVSS5.8AI score0.00398EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/31 7:57 p.m.•98 views

CVE-2024-30550

CVE-2024-30550 refers to an XSS vulnerability in wpdevart’s Responsive Image Gallery / Gallery Album. The issue is described as Reflected Cross-Site Scripting due to improper input neutralization during web page generation, affecting Gallery Album versions from n/a through 2.0.3. Connected source...

7.1CVSS8.6AI score0.00398EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/03/31 7:15 p.m.•33 views

CVE-2024-31120

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Stored XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

6.5CVSS6.4AI score0.00382EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/31 7:15 p.m.•13 views

CVE-2024-31120

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Stored XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

5.4CVSS5.8AI score0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/31 12:00 a.m.•2 views

CVE-2024-31120: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Stored XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

6.5CVSS5.8AI score0.00382EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/31 12:00 a.m.•2 views

CVE-2024-30550: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Reflected XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

7.1CVSS5.8AI score0.00398EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/31 12:00 a.m.•18 views

PT-2024-23480 · Unknown · Gallery Album +1

Name of the Vulnerable Software and Affected Versions: wpdevart Responsive Image Gallery, Gallery Album versions through 2.0.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS in the...

7.1CVSS9.2AI score0.00398EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/03/31 12:00 a.m.•13 views

PT-2024-23789 · Wpdevart · Wpdevart Responsive Image Gallery

Name of the Vulnerable Software and Affected Versions: wpdevart Responsive Image Gallery, Gallery Album versions through 2.0.3 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting XSS. Specifically, it is a Stored...

6.5CVSS8.7AI score0.00382EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/03/29 12:44 p.m.•14 views

WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Responsive Image Gallery, Gallery Album versions = 2.0.3...

6.5CVSS7.1AI score0.00382EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/03/29 12:00 a.m.•21 views

WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Image Gallery, Gallery Album Type Plugin Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31120 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 982538f631cc Credits LVT-tholv2k...

6.5CVSS6.6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder