736 matches found
PT-2023-31938 · WordPress · Everest Backup
Name of the Vulnerable Software and Affected Versions: Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin versions n/a through 2.1.9 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive dat...
WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure
Software Everest Backup Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.2.0 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2023-52185 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c95eabf537bc Credits Joshua Ch...
WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)
Software Everest Forms Type Plugin Vulnerable versions = 2.0.4.1 Fixed in 2.0.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51695 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d679b5b20d8a Credits Robert DeVore Required privilege...
WordPress Everest Forms Plugin <= 2.0.3 is vulnerable to Broken Access Control
Software Everest Forms Type Plugin Vulnerable versions = 2.0.3 Fixed in 2.0.3.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51377 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8b5448fc86fc Credits Revan Arifio Required privile...
CVE-2023-41237
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose Pro theme = 1.0.8 versions...
CVE-2023-41237
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose Pro theme = 1.0.8 versions...
CVE-2023-41235
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...
CVE-2023-41235
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose Pro theme = 1.0.8 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...
CVE-2023-41237
CVE-2023-41237 stems from an unauthenticated, reflected Cross-Site Scripting (XSS) in the WordPress theme Everest Themes’ Arya Multipurpose Pro, versioned ≤ 1.0.8. Public writeups consistently describe it as an unauthenticated XSS issue, with the impact limited to data integrity and user interact...
CVE-2023-41235
CVE-2023-41235: Everest News Pro theme (WordPress) up to version 1.1.7 is vulnerable to unauthenticated reflected XSS. Root cause: improper handling of user-controlled input in the Everest News Pro theme, enabling reflected XSS payloads. Impact is stated as cross-site scripting with unauthenticat...
CVE-2023-41235 WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...
CVE-2023-41235 WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Everest News Pro theme = 1.1.7 versions...
PT-2023-27858 · Unknown · Everest News Pro
Name of the Vulnerable Software and Affected Versions: Everest News Pro theme versions 1.1.7 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for the execution of malicious scripts on the client-side, potential...
WordPress plugin Everest News Pro cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2023-27860 · Everest Themes · Arya Multipurpose Pro
Name of the Vulnerable Software and Affected Versions: Everest Themes Arya Multipurpose Pro theme versions 1.0.8 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts...
Everest Forms Plugin for WordPress < 1.8.0 Reflected Cross-Site Scripting
The WordPress Everest Forms Plugin installed on the remote host does not sanitize user supplied input in the status parameter before outputting it, leading to a Reflected Cross-Site Scripting vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the...
WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
Software Everest News Pro Type Theme Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41235 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5fee490dcfb6 Credits László Radnai...