3805 matches found
WordPress Popup Box plugin <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update vulnerability
Missing Authorization to Unauthenticated Limited Options Update vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Popup box versions = 4.9.7...
PT-2024-16598 · WordPress · The Popup Box – Create Countdown
Name of the Vulnerable Software and Affected Versions: The Popup Box – Create Countdown, Coupon, Video, Contact Form Popups plugin for WordPress versions up to, and including, 4.9.7 Description: The issue is related to a missing capability check on the deactivate plugin option function, which...
WordPress Popup box Plugin <= 4.9.7 is vulnerable to Broken Access Control
Software Popup box Type Plugin Vulnerable versions = 4.9.7 Fixed in 4.9.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10861 Patch priority Low CVSS severity Low 5.2 Developer Claim ownership PSID bfd2e007cc0d Credits Trương Hữu Phúc truonghuuphuc...
CVE-2024-51611
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Miguel Peixe WP Feature Box wp-feature-box allows Stored XSS.This issue affects WP Feature Box: from n/a through = 0.1.3...
CVE-2024-51611 WordPress WP Feature Box plugin <= 0.1.3 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Miguel Peixe WP Feature Box wp-feature-box allows Stored XSS.This issue affects WP Feature Box: from n/a through = 0.1.3...
CVE-2024-51611 WordPress WP Feature Box plugin <= 0.1.3 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Miguel Peixe WP Feature Box wp-feature-box allows Stored XSS.This issue affects WP Feature Box: from n/a through = 0.1.3...
CVE-2024-51611
CVE-2024-51611 is a stored XSS in the WordPress plugin WP Feature Box, affecting versions <= 0.1.3. The vulnerability stems from improper neutralization of input during web page generation, enabling stored Cross‑Site Scripting via user-provided data. Impact is described as Stored XSS; explicit...
PT-2024-34754 · Miguel Peixe · Wp Feature Box
Name of the Vulnerable Software and Affected Versions: Miguel Peixe WP Feature Box versions 0.1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows attackers to store harmful scripts,...
WordPress plugin WP Feature Box 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2024-48809
An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function...
SDRAN-in-a-Box 安全漏洞
SDRAN-in-a-Box RiaB is an SD-RAN cluster from the µONOS project capable of running within a single host. A security vulnerability exists in SDRAN-in-a-Box version v.1.4.3, which stems from a denial-of-service attack via the onos-a1t component of sdran-in-a-box specifically the DeleteWatcher...
CVE-2024-48809
CVE-2024-48809 affects Open Networking Foundations sdran-in-a-box v1.4.3 and onos-a1t v0.2.3. The issue enables a remote attacker to cause a denial of service via the onos-a1t component, specifically the DeleteWatcher function. Public references corroborate the DoS impact but do not provide explo...
CVE-2024-48809
An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function...
PT-2024-33235 · Open Networking Foundation · Onos-A1T +1
Name of the Vulnerable Software and Affected Versions: Open Networking Foundations sdran-in-a-box version 1.4.3 Open Networking Foundations onos-a1t version 0.2.3 Description: A denial of service issue allows a remote attacker to cause a disruption in service via the DeleteWatcher function in the...
CVE-2024-48809
An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function...
CVE-2024-43235
Missing Authorization vulnerability in MetaBox.Io Meta Box – WordPress Custom Fields Framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.9.10...
CVE-2024-37096
Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup box: from n/a through 4.5.1...
CVE-2024-37096 WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup box: from n/a through 4.5.1...
CVE-2024-37096 WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup box: from n/a through 4.5.1...
CVE-2024-37096
CVE-2024-37096 — WordPress Popup Box plugin contains a missing/incorrectly configured authorization mechanism up to version 4.5.1. The vulnerability is described as Missing Authorization, with a CVSS base score of 4.3 (Medium) and attack vector over the network, requiring low privileges and no us...