The vulnerability of the SetSetupWizardStatus function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a intruder to execute arbitrary code.

The vulnerability of the SetSetupWizardStatus function in the D-Link DAP-1325 wireless signal booster software is related to reading data outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure

Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.1.1 Fixed in 7.1.2 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-40002 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 565c06f4723d Credits Dave Jong...

The vulnerability of the CGI microprogramming interface of the D-Link DAP-1325 wireless signal booster allows a intruder to disclose protected information.

The vulnerability of the CGI microprogramming interface of the D-Link DAP-1325 wireless signal booster exists due to the lack of authentication checks before access to functions is granted. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of the SetHostIPv6StaticSettings function in the D-Link DAP-1325 wireless signal booster software allows a hacker to execute arbitrary code.

The vulnerability of the SetHostIPv6StaticSettings function in the D-Link DAP-1325 wireless signal booster software relates to the lack of measures taken to neutralize special elements during the processing of request parameters. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the SetHostIPv6Settings function in the D-Link DAP-1325 wireless signal booster software allows a hacker to execute arbitrary code.

The vulnerability of the SetHostIPv6Settings function in the D-Link DAP-1325 wireless signal booster software relates to the lack of measures to neutralize specific elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the SetAPLanSettings() function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a hacker to execute arbitrary code.

The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster relates to the lack of measures to neutralize specific elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2023-4945

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in versions up to, and including, 7.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...

CVE-2023-4945

CVE-2023-4945 — Booster for WooCommerce (WordPress) Stored XSS Vulnerability: Stored XSS via multiple shortcode attributes in Booster for WooCommerce, affecting versions

CVE-2023-4945 Booster for WooCommerce <= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in versions up to, and including, 7.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...

CVE-2023-4945 Booster for WooCommerce <= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in versions up to, and including, 7.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...

WordPress Booster for WooCommerce Plugin <= 7.1.0 is vulnerable to Sensitive Data Exposure

Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.1.0 Fixed in 7.1.1 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2023-4796 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d3120f1c06fe Credits Lana Codes...

WordPress Plugin Booster for WooCommerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-31233 · WordPress · Booster For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Booster for WooCommerce plugin for WordPress versions up to, and including, 7.1.0 Description: The issue is related to Stored Cross-Site Scripting via multiple shortcodes due to insufficient input sanitization and output escaping on...

WordPress Booster Elementor Addons Plugin <= 1.4.9 is vulnerable to Broken Access Control

Software Booster Elementor Addons Type Plugin Vulnerable versions = 1.4.9 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-38480 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 2a9727dbbbd2 Credits Abdi Pranata Required...

WordPress Coming Soon Pages for WordPress - Coming Soon Booster Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Coming Soon Pages for WordPress - Coming Soon Booster Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 5b2ff11e8b80 Credit...

WordPress Asset CleanUp: Page Speed Booster Plugin <= 1.3.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Asset CleanUp: Page Speed Booster Type Plugin Vulnerable versions = 1.3.5.4 Fixed in 1.3.5.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID bc6a1c710d5a Credits Rafie Muhammad...

WordPress SEO Booster Plugin < 3.8.9 is vulnerable to Cross Site Scripting (XSS)

Software SEO Booster Type Plugin Vulnerable versions 3.8.9 Fixed in 3.8.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f88d0b59f7d6 Credits Rafie Muhammad Patchstack Required...

WordPress Mobile Booster Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Mobile Booster Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2238d1fec34d Credits Rafie Muhammad Patchstack Required...

WordPress Core Web Vitals & PageSpeed Booster Plugin <= 1.0.12 is vulnerable to Open Redirection

Software Core Web Vitals & PageSpeed Booster Type Plugin Vulnerable versions = 1.0.12 Fixed in 1.0.13 OWASP Top 10 A10: Insufficient Logging & Monitoring Classification Open Redirection CVE CVE-2023-35883 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID bd173d35df9c Credits...

WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer Plugin <= 2.13.44 is vulnerable to Cross Site Scripting (XSS)

Software 10Web Booster – Website speed optimization, Cache & Page Speed optimizer Type Plugin Vulnerable versions = 2.13.44 Fixed in 2.13.45 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownersh...