615 matches found
WordPress Booster for WooCommerce plugin <= 7.2.3 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Booster for WooCommerce versions = 7.2.3...
WordPress Booster for WooCommerce Plugin <= 7.2.3 is vulnerable to Cross Site Scripting (XSS)
Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.2.3 Fixed in 7.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9239 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c5b658709ea3 Credits vgo0...
CVE-2024-52428
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Scripteo Ads Booster by Ads Pro allows PHP Local File Inclusion.This issue affects Ads Booster by Ads Pro: from n/a through 1.12...
CVE-2024-52428
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Peter Ads Booster by Ads Pro free-wp-booster-by-ads-pro allows PHP Local File Inclusion.This issue affects Ads Booster by Ads Pro: from n/a through = 1.12...
CVE-2024-52428
CVE-2024-52428: WordPress Ads Booster by Ads Pro plugin <= 1.12 is affected by an improper control of filenames in include/require (PHP Local File Inclusion), enabling potential PHP Local File Inclusion with possible code execution. The CVE is shown as Unpatched in the official entry; Patchsta...
CVE-2024-52428 WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Peter Ads Booster by Ads Pro free-wp-booster-by-ads-pro allows PHP Local File Inclusion.This issue affects Ads Booster by Ads Pro: from n/a through = 1.12...
WordPress plugin Ads Booster by Ads Pro 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-35268 · Ads Pro · Ads Booster
Name of the Vulnerable Software and Affected Versions: Ads Booster by Ads Pro versions 1.12 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as PHP Remote File Inclusion. This allows PHP Local File Inclusion. Th...
WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Ads Booster by Ads Pro versions = 1.12...
WordPress Ads Booster by Ads Pro Plugin <= 1.12 is vulnerable to Local File Inclusion
Software Ads Booster by Ads Pro Type Plugin Vulnerable versions = 1.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-52428 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID dc26473e2ce0 Credits Dimas Maulana Required privilege...
CVE-2024-25253
Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module...
CVE-2024-25253
Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module...
CVE-2024-25253
The CVE-2024-25253 entry concerns Driver Booster v10.6, where a buffer overflow was found in the Host parameter under the Customize proxy module. This is described across multiple sources as the underlying issue. The vulnerability is reported with a Network attack vector, no user interaction, and...
IObit Driver Booster 安全漏洞
IObit Driver Booster is a driver updater from IObit. A security vulnerability exists in IObit Driver Booster version v10.6, which stems from a buffer overflow issue that was found to be contained via the Host parameter under the Custom Agent module...
CVE-2024-25253
Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module...
CVE-2024-43314
Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.3...
CVE-2024-43314
Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.3...
CVE-2024-43314
CVE-2024-43314 affects WordPress Asset CleanUp: Page Speed Booster (versions up to 1.3.9.3). Root cause: Missing/Incorrectly configured access control (Missing Authorization) enabling unauthorized access to assets. Impact: High (as per NVD CVSS 3.1 base score 8.8, high confidentiality, integrity,...
CVE-2024-43314 WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.9.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.3...
CVE-2024-43314 WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.9.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.3...