5267 matches found
CVE-2024-38749
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Olive Themes Olive One Click Demo Import allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Olive One Click Demo Import: from n/a through 1.1.2...
CVE-2024-38749 WordPress Olive One Click Demo Import plugin <= 1.1.2 - Sensitive Data Exposure vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Olive Themes Olive One Click Demo Import allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Olive One Click Demo Import: from n/a through 1.1.2...
CVE-2024-38749
CVE-2024-38749 affects the Olive One Click Demo Import plugin for WordPress (versions n/a through 1.1.2). The issue is Information Disclosure caused by Access Control Lists (ACLs) not properly constraining access to certain functionality, allowing an unauthorized actor to access sensitive data. P...
PT-2024-28193 · Unknown · Olive One Click Demo Import
Name of the Vulnerable Software and Affected Versions: Olive One Click Demo Import versions 1.1.2 and earlier Description: The issue allows exposure of sensitive information to an unauthorized actor due to accessing functionality not properly constrained by ACLs. Recommendations: For Olive One...
WordPress plugin Olive One Click Demo Import 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An information disclosure vulnerabilit...
New Cloud Risk Dashboard: Identifying Toxic Combinations to Drive Faster Remediation
Co-authored by Andrea Ruddy Risks identified within a cloud environment compound to represent a real threat of exploitation. Our cloud risk scoring, introduced recently to insightCloudSec, focuses on these toxic combinations. Toxic combinations are attractive for bad actors who can target multipl...
Academy LMS 6.8.1 Cross Site Scripting
============================================================================================================================================= | Title : Academy LMS 6.8.1 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits | | Vendo...
CVE-2024-3938
The "reset password" login page accepted an HTML injection via URL parameters. This has already been rectified via patch, and as such it cannot be demonstrated via Demo site link. Those interested to see the vulnerability may spin up a...
Vencorp 2.1.1 SQL Injection
==================================================================================================================================== | Title : Vencorp v 2.1.1 Auth by Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor ...
Quick Job 2.4 Insecure Direct Object Reference
==================================================================================================================================== | Title : Quick Job v2.4 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...
CVE-2024-37206
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme4Press Demo Awesome allows Reflected XSS.This issue affects Demo Awesome: from n/a through 1.0.1...
CVE-2024-37206
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme4Press Demo Awesome allows Reflected XSS.This issue affects Demo Awesome: from n/a through 1.0.1...
CVE-2024-37206 WordPress Demo Awesome plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme4Press Demo Awesome allows Reflected XSS.This issue affects Demo Awesome: from n/a through 1.0.1...
CVE-2024-37206 WordPress Demo Awesome plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme4Press Demo Awesome allows Reflected XSS.This issue affects Demo Awesome: from n/a through 1.0.1...
CVE-2024-37206
CVE-2024-37206 is a reflected Cross-Site Scripting (XSS) vulnerability in the Theme4Press Demo Awesome WordPress plugin. It affects Demo Awesome versions up to 1.0.1 (exact vulnerable range shown as from n/a through 1.0.1). The issue is triggered during web page generation via improper input neut...
Agop CMS 1.0 Insecure Direct Object Reference
==================================================================================================================================== | Title : Agop CMS v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...
PT-2024-27374 · Unknown · Theme4Press Demo Awesome
Name of the Vulnerable Software and Affected Versions: Theme4Press Demo Awesome versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...
PT-2024-37714 · WordPress · Schedulepress
Name of the Vulnerable Software and Affected Versions: SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher plugin for WordPress versions up to, and including, 5.1.3 Description: The issue is due to the plugin utilizing th...