CVE-2024-54434 WordPress phZoom plugin <= 1.2.92 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Phoetry phZoom allows Stored XSS.This issue affects phZoom: from n/a through 1.2.92...

CVE-2024-54433

CVE-2024-54433 describes a CSRF vulnerability in the Simple Booking Widget that can lead to stored XSS. Affected software is Simple Booking Widget (version range from n/a through 1.1). Connected sources confirm the issue and indicate patch status as Unpatched; no public exploitation status is pro...

CVE-2024-54435 WordPress Onlywire Multi Autosubmitter plugin <= 1.2.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Thomas Hoefter Onlywire Multi Autosubmitter onlywire-multi-autosubmitter allows Stored XSS.This issue affects Onlywire Multi Autosubmitter: from n/a through = 1.2.4...

CVE-2024-54435

CVE-2024-54435 is a CSRF-to-Stored XSS vulnerability in the WordPress plugin “Onlywire Multi Autosubmitter,” affecting versions up to 1.2.4 (availability in initial document and EU/RH references). The CVE entry indicates the issue is a Cross-Site Request Forgery vulnerability that can lead to Sto...

CVE-2024-54437 WordPress jCarousel for WordPress plugin <= 1.0 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in koolkatwebdesigns jCarousel jcarousel-for-wordpress allows Stored XSS.This issue affects jCarousel: from n/a through = 1.0...

CVE-2024-54437

CVE-2024-54437 affects jCarousel for WordPress (Merrill M. Mayer jCarousel). The issue is Improper Neutralization of Input During Web Page Generation, enabling Stored Cross-Site Scripting. According to the CVE entry, the vulnerability allows stored XSS in affected pages, with a CVSS v3.1 base sco...

CVE-2024-54437 WordPress jCarousel for WordPress plugin <= 1.0 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Merrill M. Mayer jCarousel allows Stored XSS.This issue affects jCarousel: from n/a through 1.0...

CVE-2024-54438 WordPress Gaxx Keywords plugin <= 0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in gaxx Gaxx Keywords gaxx-keywords allows Stored XSS.This issue affects Gaxx Keywords: from n/a through = 0.2...

CVE-2024-54439

CVE-2024-54439 is a CSRF to Stored XSS vulnerability in the Amazon Product Price WordPress plugin. Affected software: Amazon Product Price (WordPress). Reported issue links indicate CSRF could trigger Stored XSS, enabling execution of arbitrary scripts in victim sessions. CVSSv3.1 base score 7.1 ...

CVE-2024-54438 WordPress Gaxx Keywords plugin <= 0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in GAxx Gaxx Keywords allows Stored XSS.This issue affects Gaxx Keywords: from n/a through 0.2...

CVE-2024-54439 WordPress Amazon Product Price plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Alok Tiwari Amazon Product Price amazon-product-price allows Stored XSS.This issue affects Amazon Product Price: from n/a through = 1.1...

CVE-2024-54440 WordPress WP-Ban-User plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blueskyy WP-Ban-User allows Stored XSS.This issue affects WP-Ban-User: from n/a through 1.0...

CVE-2024-54440 WordPress WP-Ban-User plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blueskyy WP-Ban-User wp-ban-user allows Stored XSS.This issue affects WP-Ban-User: from n/a through = 1.0...

CVE-2024-56012

CVE-2024-56012: CSRF to Privilege Escalation in WordPress plugins Flash News / Post (Responsive) and Post Title (TypeWriter); affected versions up to 4.1. No public exploit details in the connected documents. Patch status not provided here; Wordfence notes patch status as Unpatched and monitoring...

CVE-2024-56012 WordPress Flash News / Post (Responsive) plugin <= 4.1 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in lizeipe Flash News / Post Responsive flashnews-fading-effect-pearlbells allows Privilege Escalation.This issue affects Flash News / Post Responsive: from n/a through = 4.1...

CVE-2024-56012 WordPress Flash News / Post (Responsive) plugin <= 4.1 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in lizeipe Flash News / Post Responsive flashnews-fading-effect-pearlbells allows Privilege Escalation.This issue affects Flash News / Post Responsive: from n/a through = 4.1...

CVE-2024-12644

The tbm-client from Chunghwa Telecom has an Arbitrary File vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through...

CVE-2024-12642

TenderDocTransfer from Chunghwa Telecom has an Arbitrary File Write vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use these APIs...

CVE-2024-12643

The tbm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs...

CVE-2024-12646

The topm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs...