1312 matches found
WordPress plugin Bulk Page Stub Creator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2025-32247
Cross-Site Request Forgery CSRF vulnerability in ABCdatos AI Content Creator ai-content-creator allows Cross Site Request Forgery.This issue affects AI Content Creator: from n/a through = 1.2.6...
CVE-2025-32247
Cross-Site Request Forgery CSRF vulnerability in ABCdatos AI Content Creator ai-content-creator allows Cross Site Request Forgery.This issue affects AI Content Creator: from n/a through = 1.2.6...
CVE-2025-32247 WordPress AI Content Creator plugin <= 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in ABCdatos AI Content Creator ai-content-creator allows Cross Site Request Forgery.This issue affects AI Content Creator: from n/a through = 1.2.6...
CVE-2025-32247
Based on the provided documents, no connected technical details are available for CVE-2025-32247 beyond the description of a CSRF vulnerability in ABCdatos AI Content Creator affecting versions up to 1.2.6. No exploit info, affected-versions specifics, root-cause, or remediation are provided here...
WordPress AI Content Creator plugin <= 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin AI Content Creator versions = 1.2.6...
WordPress plugin AI Content Creator 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2025-2483 Gift Certificate Creator <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter
The Gift Certificate Creator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘receipaddress’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...
CVE-2025-2483
CVE-2025-2483 affects the Gift Certificate Creator plugin for WordPress. It allows a Reflected Cross-Site Scripting (XSS) via the receip_address parameter in all versions up to 1.1.0. The issue enables unauthenticated attackers to inject arbitrary scripts into pages that execute when a user perfo...
PT-2025-14472 · WordPress · Gift Certificate Creator
Name of the Vulnerable Software and Affected Versions: The Gift Certificate Creator plugin for WordPress versions up to, and including, 1.1.0 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...
WordPress plugin Gift Certificate Creator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress Gift Certificate Creator plugin <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter vulnerability
Reflected Cross-Site Scripting via receipaddress Parameter vulnerability discovered by johska in WordPress Plugin Gift Certificate Creator versions = 1.1.0...
Security Bulletin: A vulnerability in IBM Robotic Process Automation may result in exposure of the name and email for the creator/modifier of platform level objects (CVE-2022-43573)
Summary There is a vulnerability in IBM Robotic Process Automation. Accessing specific platform level objects created in RPA may expose the creator or modifiers email address. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details...
CVE-2024-9617 IDOR in danswer-ai/danswer
An IDOR vulnerability in danswer-ai/danswer v0.3.94 allows an attacker to view any files. The application does not verify whether the attacker is the creator of the file, allowing the attacker to directly call the GET /api/chat/file/fileid interface to view any user's file...
CVE-2024-9617
Summary: CVE-2024-9617 describes an Insecure Direct Object Reference in danswer-ai/danswer v0.3.94 where an attacker can view any user file via GET /api/chat/file/{file_id} due to missing ownership checks. Details from connected docs: • Vulnerable component: Danswer application (v0.3.94). • Root ...
CVE-2024-9617 IDOR in danswer-ai/danswer
An IDOR vulnerability in danswer-ai/danswer v0.3.94 allows an attacker to view any files. The application does not verify whether the attacker is the creator of the file, allowing the attacker to directly call the GET /api/chat/file/fileid interface to view any user's file...
CVE-2024-12114
The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.29 via the foogalleryattachmentmodalsave AJAX action due to missing validation on a user controll...
CVE-2024-12114
The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.29 via the foogalleryattachmentmodalsave AJAX action due to missing validation on a user controll...
CVE-2025-27311
Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...