CVE-2024-11103 Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover

The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated...

PT-2024-16765

Name of the Vulnerable Software and Affected Versions Contest Gallery plugin for WordPress versions up to, and including, 24.0.7 Description The issue is related to privilege escalation via account takeover due to the plugin not properly validating a user's identity prior to updating their...

CVE-2024-11103: Weak Password Recovery Mechanism for Forgotten Password

The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated...

WordPress plugin Contest Gallery 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

WordPress Contest Gallery plugin <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover vulnerability

Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover vulnerability discovered by shaman0x01 in WordPress Plugin Contest Gallery versions = 24.0.7...

WordPress Contest Gallery Plugin <= 24.0.7 is vulnerable to Privilege Escalation

Software Contest Gallery Type Plugin Vulnerable versions = 24.0.7 Fixed in 24.0.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-11103 Patch priority High CVSS severity High 9.8 Developer Wasiliy Strecker PSID 917060960355 Credits...

CVE-2024-51837

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SONS Creative Development WP Contest allows SQL Injection.This issue affects WP Contest: from n/a through 1.0.0...

CVE-2024-51837

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sophia M Williams WP Contest wp-contest allows SQL Injection.This issue affects WP Contest: from n/a through = 1.0.0...

CVE-2024-51837

CVE-2024-51837 is a WordPress WP Contest plugin SQL injection vulnerability (Improper Neutralization of Special Elements) affecting WP Contest

CVE-2024-51837 WordPress WP Contest plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SONS Creative Development WP Contest allows SQL Injection.This issue affects WP Contest: from n/a through 1.0.0...

run.codes 安全漏洞

run.codes is a server software from run.codes open source. A security vulnerability exists in run.codes version 1.5.2 and earlier, which stems from a Reset Password Contest Condition vulnerability in the file UsersController.php...

WordPress plugin WP Contest SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP...

CVE-2024-51837: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sophia M Williams WP Contest wp-contest allows SQL Injection.This issue affects WP Contest: from n/a through = 1.0.0...

PT-2024-34964 · WordPress · Wp Contest

Name of the Vulnerable Software and Affected Versions: WP Contest versions n/a through 1.0.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially enabling...

WordPress WP Contest plugin <= 1.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin WP Contest versions = 1.0.0...

WordPress WP Contest Plugin <= 1.0.0 is vulnerable to SQL Injection

Software WP Contest Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51837 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID f10ee023a1cd Credits LVT-tholv2k Required privilege Contributor Published 8...

WordPress plugin Contest Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

PT-2024-16462

Name of the Vulnerable Software and Affected Versions Contest-Gallery plugin for WordPress versions prior to 24.0.1 Contest-Gallery plugin for WordPress version 24.0.1 is not affected according to some sources, but others indicate versions up to and including 24.0.3 are vulnerable. Therefore,...

CVE-2024-10687: Improper Neutralization of Special Elements used in an SQL Command

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to time-based SQL Injection via the $collectedIds parameter in all versions up to, and including, 24.0.3 due to insufficient...

WordPress Contest Gallery plugin <= 24.0.3 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by shaman0x01 in WordPress Plugin Contest Gallery versions = 24.0.3...