Mozilla Firefox ESR Security Vulnerability

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox ESR version 115.4, which originates from the creation of a malicious link through the use of bidirectional characters that...

Mozilla Thunderbird < 115.4.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-47 advisory. - Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bug...

PT-2023-6538 · Mozilla +9 · Firefox +11

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 117 Firefox ESR versions prior to 115.4 Thunderbird versions prior to 115.4.1 Description: The issue is related to errors in the representation of information in the user interface, allowing an attacker to conduct...

CVE-2023-38390

Cross-Site Request Forgery CSRF vulnerability in Anshul Labs Mobile Address Bar Changer plugin = 3.0 versions...

CVE-2023-38390

Cross-Site Request Forgery CSRF vulnerability in Anshul Labs Mobile Address Bar Changer plugin = 3.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Anshul Labs Mobile Address Bar Changer plugin = 3.0 versions...

CVE-2023-38390

CVE-2023-38390 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Anshul Labs Mobile Address Bar Changer (versions ≤ 3.0). The issue arises from CSRF in the plugin’s settings update flow, allowing an unauthenticated attacker to induce a user to perform unintended actions...

WordPress Plugin mobile-address-bar-changer Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2023-26399 · Anshul · Anshul Labs Mobile Address Bar Changer

Name of the Vulnerable Software and Affected Versions: Anshul Labs Mobile Address Bar Changer plugin versions = 3.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

CVE-2023-41737

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPGens Swifty Bar, sticky bar by WPGens plugin = 1.2.10 versions...

CVE-2023-41847

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WEN Solutions Notice Bar plugin = 3.1.0 versions...

CVE-2023-41847

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WEN Solutions Notice Bar plugin = 3.1.0 versions...

CVE-2023-41737

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPGens Swifty Bar, sticky bar by WPGens plugin = 1.2.10 versions...

CVE-2023-41847

CVE-2023-41847 affects the WordPress plugin Notice Bar (WEN Solutions) with versions

CVE-2023-41847 WordPress Notice Bar Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WEN Solutions Notice Bar plugin = 3.1.0 versions...

CVE-2023-41737

CVE-2023-41737 : WordPress plugin Swifty Bar (WPGens) vulnerable to Stored XSS when using versions

CVE-2023-41737 WordPress Swifty Bar, sticky bar by WPGens Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPGens Swifty Bar, sticky bar by WPGens plugin = 1.2.10 versions...

PT-2023-28077 · Wpgens · Swifty Bar

Name of the Vulnerable Software and Affected Versions: Swifty Bar, sticky bar by WPGens plugin versions = 1.2.10 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This allows for malicious scripts to be stored on th...

WordPress Plugin Notice Bar Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Swifty Bar, sticky bar by WPGens < 1.2.11 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...