79 matches found
CVE-2021-24868: Exposure of Resource to Wrong Sphere
The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts...
WordPress 安全漏洞
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress Document Embedder plugin versions prior to 1.7.5 contain an information disclosure vulnerability that could be exploited to all...
WordPress 安全漏洞
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. Document Embedder WordPress plugin prior to version 1.7.9 is vulnerable to a title enumeration vulnerability, which stems from the fact that the plugin includes an AJAX operation endpoint that can be...
CVE-2021-24775: Exposure of Resource to Wrong Sphere
The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts...
Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure
The plugin contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts. https://example.com/wp-json/doc/v1/single/509 509 being the ID of a private/draft Post...
Document Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure
The plugin contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts. As any authenticated user 1764 being the ID of a private/draft post...
WordPress Document Embedder plugin <= 1.7.6 - Arbitrary Private/Draft Post Title Disclosure vulnerability
Arbitrary Private/Draft Post Title Disclosure vulnerability discovered by apple502j in WordPress Document Embedder plugin versions = 1.7.6. Solution Update the WordPress Document Embedder plugin to the latest available version at least 1.7.8...
WordPress Document Embedder plugin <= 1.7.4 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure vulnerability
Unauthenticated Arbitrary Private/Draft Post Title Disclosure vulnerability discovered by apple502j in WordPress Document Embedder plugin versions = 1.7.4. Solution Update the WordPress Document Embedder plugin to the latest available version at least 1.7.5...
CVE-2016-10881
The google-document-embedder plugin before 2.6.2 for WordPress has XSS...
CVE-2016-10881
The google-document-embedder plugin before 2.6.2 for WordPress has XSS...
CVE-2016-10880
The google-document-embedder plugin before 2.6.1 for WordPress has XSS...
CVE-2016-10882
The google-document-embedder plugin before 2.6.2 for WordPress has CSRF...
CVE-2016-10880
The google-document-embedder plugin before 2.6.1 for WordPress has XSS...
Cross site scripting
The google-document-embedder plugin before 2.6.2 for WordPress has XSS...
Cross site scripting
The google-document-embedder plugin before 2.6.1 for WordPress has XSS...
Cross site request forgery (csrf)
The google-document-embedder plugin before 2.6.2 for WordPress has CSRF...
CVE-2016-10880
The google-document-embedder plugin before 2.6.1 for WordPress has XSS...
CVE-2016-10881
The google-document-embedder plugin before 2.6.2 for WordPress has XSS...
CVE-2016-10881
The CVE-2016-10881 entry concerns the WordPress Google Document Embedder plugin prior to version 2.6.2, which is reported to have an XSS vulnerability. Since multiple connected sources (RH advisory, NVD/NVD-derived entries, and OpenVAS data) confirm the same issue but do not provide vendor-specif...