CVE-2024-51697 WordPress Doofinder plugin <= 0.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder doofinder allows Reflected XSS.This issue affects Doofinder: from n/a through = 0.5.4...

CVE-2024-51697

CVE-2024-51697 affects the Doofinder WordPress plugin with versions from n/a through 0.5.4. Root cause: improper input neutralization during web page generation, enabling Reflected XSS. Published context from Red Hat/Wordfence confirms Reflected XSS in Doofinder up to 0.5.4. Remediation: upgrade ...

PT-2024-34844 · Doofinder · Doofinder

Name of the Vulnerable Software and Affected Versions: Doofinder versions 0.5.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS or Reflected XSS. This type of issue allows an attacker to inject...

WordPress plugin Doofinder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress Doofinder plugin <= 0.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Doofinder versions = 0.5.4...

WordPress Doofinder Plugin <= 0.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Doofinder Type Plugin Vulnerable versions = 0.5.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51697 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c0891a6b2f0a Credits João Pedro S Alcântara Kinorth Required...

CVE-2024-25596

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2.1.8...

CVE-2024-25596

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2.1.8...

CVE-2024-25596 WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2.1.8...

CVE-2024-25596

CVE-2024-25596 affects Doofinder for WooCommerce (WordPress). The vulnerability is a Stored XSS due to improper input handling in admin/settings, exploitable by an authenticated administrator. Affected versions are Doofinder for WooCommerce up to 2.1.8; a fix is available in version 2.1.9. Remedi...

CVE-2024-25596 WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder for WooCommerce allows Stored XSS.This issue affects Doofinder for WooCommerce: from n/a through 2.1.8...

WordPress Plugin Doofinder WP & WooCommerce Search Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-21026 · Woocommerce · Doofinder For Woocommerce

Name of the Vulnerable Software and Affected Versions: Doofinder for WooCommerce versions through 2.1.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

Doofinder for WooCommerce < 2.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings

Description The Doofinder WP & WooCommerce Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Doofinder for WooCommerce Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)

Software Doofinder for WooCommerce Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25596 Patch priority Low CVSS severity Low 5.9 Developer Doofinder PSID f59e1c505675 Credits Dhabaleshwar Das Required privileg...

CVE-2023-51678

Cross-Site Request Forgery CSRF vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33...

CVE-2023-51678

Cross-Site Request Forgery CSRF vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33...

CVE-2023-51678 WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control

Cross-Site Request Forgery CSRF vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33...

CVE-2023-51678 WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control

Cross-Site Request Forgery CSRF vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33...