Lucene search
+L

1119 matches found

Patchstack
Patchstack
•added 2024/03/29 12:20 p.m.•14 views

WordPress Woocommerce Social Media Share Buttons plugin <= 1.3.0 - CSRF to Cross Site Scripting (XSS) vulnerability

CSRF to Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Woocommerce Social Media Share Buttons versions = 1.3.0...

7.1CVSS7.2AI score0.00184EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/03/29 12:00 a.m.•24 views

WordPress Woocommerce Social Media Share Buttons Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Woocommerce Social Media Share Buttons Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31109 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2941fe56e84a Credits Dimas Maula...

7.1CVSS6.5AI score0.00184EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/03/27 7:15 a.m.•24 views

CVE-2024-30196

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appscreo Easy Social Share Buttons allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through 9.4...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 6:37 a.m.•74 views

CVE-2024-30196

CVE-2024-30196 affects Appscreo Easy Social Share Buttons for WordPress (affected: up to version 9.4). The vulnerability is an improper neutralization of input during web page generation, resulting in a reflected cross-site scripting (XSS) flaw. The Red Hat entry confirms the CVE and its descript...

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/27 6:37 a.m.•36 views

CVE-2024-30196 WordPress Easy Social Share Buttons plugin <= 9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appscreo Easy Social Share Buttons allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through 9.4...

7.1CVSS7.1AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/27 6:37 a.m.•26 views

CVE-2024-30196 WordPress Easy Social Share Buttons plugin <= 9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appscreo Easy Social Share Buttons allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through 9.4...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•11 views

WordPress Plugin Easy Social Share Buttons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS7AI score0.00354EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•2 views

CVE-2024-30196: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Appscreo Easy Social Share Buttons allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through 9.4...

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/03/25 12:00 a.m.•15 views

WordPress Easy Social Share Buttons Plugin <= 9.4 is vulnerable to Cross Site Scripting (XSS)

Software Easy Social Share Buttons Type Plugin Vulnerable versions = 9.4 Fixed in 9.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30196 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f4ed0dcb5dd6 Credits Rafie Muhammad Patchstack...

7.1CVSS6.8AI score0.00354EPSS
SaveExploits0References1Affected Software1
wpexploit
wpexploit
•added 2024/03/25 12:00 a.m.•157 views

Simple Buttons Creator <= 1.04 - Aribtrary Button Deletion via CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks Make a logged in admin open a page with the code below where is an existing button:...

9.5AI score0.00192EPSS
SaveExploits2
NVD
NVD
•added 2024/03/20 12:15 p.m.•29 views

CVE-2024-2721

Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This issue affects Social Media Share Buttons: from n/a through 2.1.0...

8.8CVSS8.3AI score0.00672EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/20 12:15 p.m.•16 views

CVE-2024-2721

Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This issue affects Social Media Share Buttons: from n/a through 2.1.0...

8.8CVSS5.8AI score0.00672EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/20 11:40 a.m.•93 views

CVE-2024-2721

CVE-2024-2721 describes a PHP Object Injection deserialization vulnerability in the WordPress Social Media Share Buttons plugin

8.8CVSS5.2AI score0.00672EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/20 11:40 a.m.•38 views

CVE-2024-2721 WordPress Social Media Share Buttons plugin <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This issue affects Social Media Share Buttons: from n/a through 2.1.0...

8.2CVSS8.4AI score0.00672EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/20 11:40 a.m.•18 views

CVE-2024-2721 WordPress Social Media Share Buttons plugin <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This issue affects Social Media Share Buttons: from n/a through 2.1.0...

8.2CVSS7AI score0.00672EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/03/20 12:00 a.m.•21 views

WordPress Standout Color Boxes and Buttons Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS)

Software Standout Color Boxes and Buttons Type Plugin Vulnerable versions = 0.7.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2474 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID cbc359b9c82d Credits Francesco...

6.4CVSS6AI score0.004EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•23 views

WordPress Plugin Social Media Share Buttons Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

8.8CVSS6.7AI score0.00672EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•4 views

CVE-2024-2474: Improper Neutralization of Input During Web Page Generation

The Standout Color Boxes and Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'color-button' shortcode in all versions up to, and including, 0.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib...

6.4CVSS6AI score0.004EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•14 views

WordPress Plugin Standout Color Boxes and Buttons Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

6.4CVSS5.9AI score0.004EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•5 views

CVE-2024-2721: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This issue affects Social Media Share Buttons: from n/a through 2.1.0...

8.8CVSS5.8AI score0.00672EPSS
SaveExploits0References2
Rows per page
Query Builder