WordPress The Events Calendar PRO Plugin <= 7.0.2 is vulnerable to Remote Code Execution (RCE)

Software The Events Calendar PRO Type Plugin Vulnerable versions = 7.0.2 Fixed in 7.0.2.1 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-8016 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 6cd7e1f40c75 Credits István Márton Required...

CVE-2024-39638

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Roundup WP Registrations for the Events Calendar allows SQL Injection.This issue affects Registrations for the Events Calendar: from n/a through 2.12.2...

CVE-2024-39638

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Roundup WP Registrations for the Events Calendar allows SQL Injection.This issue affects Registrations for the Events Calendar: from n/a through 2.12.2...

CVE-2024-39638 WordPress Registrations for the Events Calendar plugin <= 2.12.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Roundup WP Registrations for the Events Calendar allows SQL Injection.This issue affects Registrations for the Events Calendar: from n/a through 2.12.2...

CVE-2024-39638

CVE-2024-39638 affects the WordPress plugin Registrations for the Events Calendar (Roundup WP Registrations) up to version 2.12.2. The issue is an SQL Injection caused by improper neutralization of special elements in SQL queries. Affected versions are n/a–2.12.2; patch released to fix in 2.12.3....

CVE-2024-39638 WordPress Registrations for the Events Calendar plugin <= 2.12.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Roundup WP Registrations for the Events Calendar allows SQL Injection.This issue affects Registrations for the Events Calendar: from n/a through 2.12.2...

PT-2024-28574 · WordPress · Roundup Wp Registrations For The Events Calendar

Name of the Vulnerable Software and Affected Versions: Roundup WP Registrations for the Events Calendar versions n/a through 2.12.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...

WordPress plugin Registrations for the Events Calendar SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress plug...

WordPress Spiffy Calendar plugin <= 4.9.12 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Minh Giang & Christopher Houk in WordPress Plugin Spiffy Calendar versions = 4.9.12...

WordPress Spiffy Calendar Plugin <= 4.9.12 is vulnerable to SQL Injection

Software Spiffy Calendar Type Plugin Vulnerable versions = 4.9.12 Fixed in 4.9.13 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-43969 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 7bc8db74206e Credits Certus Cybersecurity Required privilege...

PT-2024-6669 · WordPress · The Events Calendar

Name of the Vulnerable Software and Affected Versions: The Events Calendar plugin for WordPress versions up to and including 6.6.4 Description: The issue is related to a SQL injection vulnerability in the tribe has next event function of the plugin. This vulnerability allows an unauthenticated...

CVE-2024-27730

Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature...

CVE-2024-27729

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the location parameter of the calendar event feature...

PT-2024-22012 · Friendica · Friendica

Name of the Vulnerable Software and Affected Versions: Friendica version 2023.12 Description: A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via the location parameter of the calendar event feature. Recommendations: For Friendica version 2023.12, consider...

CVE-2024-27729

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the location parameter of the calendar event feature...

CVE-2024-27730

CVE-2024-27730 – Normal mode Affected product: Friendica v2023.12. Vulnerability: Insecure Permissions allowing a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature. Impact: High (per CVSS 3.1 metrics: CVSS:3.1/AV:N/AC:L/...

CVE-2024-27730

Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature...

CVE-2024-27729

CVE-2024-27729 describes a Cross Site Scripting vulnerability in the Friendica 2023.12 calendar event feature, where an attacker can obtain sensitive information via the calendar event’s location parameter. The affected software is Friendica (version 2023.12) and the underlying issue is a reflect...

CVE-2024-27729

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the location parameter of the calendar event feature...

CVE-2024-27730

Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature...