Lucene search
+L

423 matches found

Patchstack
Patchstack
•added 2024/11/08 12:08 p.m.•12 views

WordPress Pdf Embedder Fay plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Pdf Embedder Fay versions = 1.10.1...

6.5CVSS6.1AI score0.0039EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/11/08 12:00 a.m.•13 views

WordPress Pdf Embedder Fay Plugin <= 1.10.1 is vulnerable to Cross Site Scripting (XSS)

Software Pdf Embedder Fay Type Plugin Vulnerable versions = 1.10.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51795 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4a58f6ce2474 Credits SOPROBRO Required privilege Contributo...

6.5CVSS6.5AI score0.0039EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/06/27 1:48 p.m.•12 views

WordPress PDF Embedder plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by m3ez Patchstack Alliance in WordPress Plugin PDF Embedder versions = 4.7.1...

8.8CVSS7.7AI score0.7066EPSS
SaveExploits19Affected Software1
Patchstack
Patchstack
•added 2024/06/27 12:00 a.m.•23 views

WordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin <= 2.1.21 is vulnerable to Cross Site Scripting (XSS)

Software PDF Poster - PDF Embedder Plugin for WordPress Type Plugin Vulnerable versions = 2.1.21 Fixed in 2.1.22 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 4 Developer Claim ownership PSID 9ee58daffa95 Credits Yudistir...

7.6AI score0.7066EPSS
SaveExploits19References2Affected Software1
Patchstack
Patchstack
•added 2024/06/27 12:00 a.m.•24 views

WordPress PDF Embedder Plugin <= 4.7.1 is vulnerable to Cross Site Scripting (XSS)

Software PDF Embedder Type Plugin Vulnerable versions = 4.7.1 Fixed in 4.8.0 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7794a505b744 Credits m3ez Required...

7.6AI score0.7066EPSS
SaveExploits19References2Affected Software1
CVE
CVE
•added 2024/05/08 11:09 a.m.•91 views

CVE-2024-34561

CVE-2024-34561 affects the Real 3D FlipBook WordPress Plugin family (3D FlipBook, PDF Viewer, PDF Embedder). Connected data confirms a Stored Cross-Site Scripting vulnerability in 3D FlipBook

5.9CVSS5.2AI score0.00259EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/08 12:00 a.m.•9 views

CVE-2024-34561: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Stored XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook...

5.9CVSS5.8AI score0.00259EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/05/07 12:00 a.m.•35 views

WordPress 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin Plugin <= 3.71 is vulnerable to Cross Site Scripting (XSS)

Software 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin Type Plugin Vulnerable versions = 3.71 Fixed in 3.72 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34561 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID...

5.9CVSS6.6AI score0.00259EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/04/30 7:17 a.m.•23 views

WordPress Google Doc Embedder plugin <= 2.6.4 - Authenticated (Contributor+) Blind Server Side Request Forgery vulnerability

Authenticated Contributor+ Blind Server Side Request Forgery vulnerability discovered by István Márton in WordPress Plugin Google Document Embedder versions = 2.6.4...

6.4CVSS7AI score0.00316EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/04/30 1:54 a.m.•74 views

CVE-2024-0216

The CVE-2024-0216 entry for Google Doc Embedder (WordPress) is a SSRF vulnerability in the gview shortcode present in WordPress plugin versions up to 2.6.4. Reported impact states that authenticated users with contributor permissions can cause the application to make outbound requests to arbitrar...

6.4CVSS6.5AI score0.00316EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/30 12:00 a.m.•18 views

WordPress plugin Google Doc Embedder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.6AI score0.00316EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/04/30 12:00 a.m.•20 views

WordPress Google Document Embedder Plugin <= 2.6.4 is vulnerable to Server Side Request Forgery (SSRF)

Software Google Document Embedder Type Plugin Vulnerable versions = 2.6.4 Fixed in N/A OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-0216 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID bfeba1aa8dc2 Credits István Márton Required...

6.4CVSS6.9AI score0.00316EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/30 12:00 a.m.•7 views

CVE-2024-0216: Server-Side Request Forgery (SSRF)

The Google Doc Embedder plugin for WordPress is vulnerable to Server Side Request Forgery via the 'gview' shortcode in versions up to, and including, 2.6.4. This can allow authenticated attackers with contributor-level permissions or above to make web requests to arbitrary locations originating...

6.4CVSS5.8AI score0.00316EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/29 12:00 a.m.•20 views

PT-2024-15391 · WordPress · Google Doc Embedder

Name of the Vulnerable Software and Affected Versions: Google Doc Embedder plugin for WordPress versions up to, and including, 2.6.4 Description: The issue allows authenticated attackers with contributor-level permissions or above to make web requests to arbitrary locations originating from the w...

6.4CVSS6.6AI score0.00316EPSS
SaveExploits0References6
WPVulnDB
WPVulnDB
•added 2024/04/29 12:00 a.m.•20 views

Google Doc Embedder <= 2.6.4 - Authenticated (Contributor+) Blind Server Side Request Forgery

Description The Google Doc Embedder plugin for WordPress is vulnerable to Server Side Request Forgery via the 'gview' shortcode in versions up to, and including, 2.6.4. This can allow authenticated attackers with contributor-level permissions or above to make web requests to arbitrary locations...

6.4CVSS6.7AI score0.00316EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2024/04/24 12:00 a.m.•12 views

3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin < 3.63 - Reflected Cross-Site Scripting

Description The 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 3.62 due to insufficient input sanitization and output escaping. This makes it possible for...

7.1CVSS6.5AI score0.00371EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/04/22 8:15 a.m.•24 views

CVE-2024-32694

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Reflected XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook...

7.1CVSS6.9AI score0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/22 7:48 a.m.•37 views

CVE-2024-32694 WordPress 3D FlipBook, PDF Viewer, PDF Embedder plugin <= 3.62 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Reflected XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook...

7.1CVSS7.1AI score0.00371EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/22 12:00 a.m.•8 views

CVE-2024-32694: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Reflected XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook...

7.1CVSS5.8AI score0.00371EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/19 2:09 p.m.•11 views

WordPress 3D FlipBook, PDF Viewer, PDF Embedder plugin <= 3.62 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Real 3D FlipBook versions = 3.62...

7.1CVSS6.1AI score0.00371EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder