WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Events Addon for Elementor versions = 2.2.2...

CVE-2024-52864

creationtimestamp| type| source ---|---|--- 2024-12-11 00:11:26+00:00| seen| https://t.me/cvedetector/12610 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18 16:44:33+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764...

CVE-2024-53960

creationtimestamp| type| source ---|---|--- 2024-12-11 00:11:03+00:00| seen| https://t.me/cvedetector/12591 2025-09-16 23:16:37+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18 16:44:31+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764...

CVE-2024-54151 Directus allows unauthenticated access to WebSocket events and operations

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 11.0.0 and prior to version 11.3.0, when setting WEBSOCKETSGRAPHQLAUTH or WEBSOCKETSRESTAUTH to "public", an unauthenticated user is able to do any of the supported operations CRUD, subscriptions...

GHSA-849R-QRWJ-8RV4 Directus allows unauthenticated access to WebSocket events and operations

Summary When setting WEBSOCKETSGRAPHQLAUTH or WEBSOCKETSRESTAUTH to "public", an unauthenticated user is able to do any of the supported operations CRUD, subscriptions with full admin privileges. Details Accountability for unauthenticated WebSocket requests is set to null, which used to be "publi...

Directus allows unauthenticated access to WebSocket events and operations

Summary When setting WEBSOCKETSGRAPHQLAUTH or WEBSOCKETSRESTAUTH to "public", an unauthenticated user is able to do any of the supported operations CRUD, subscriptions with full admin privileges. Details Accountability for unauthenticated WebSocket requests is set to null, which used to be "publi...

CVE-2024-45761

creationtimestamp| type| source ---|---|--- 2024-12-09 18:53:06+00:00| seen| https://t.me/cvedetector/12417 2025-02-06 02:41:38+00:00| seen| Telegram/ngnRRkl3prhObdnqrDmTDUSlK3JqMM0siEGWM24ay-JoDBb 2025-02-06 02:42:28+00:00| seen| Telegram/9vf3Kl5IoP2NwvIdzXFKh9PljG43WO4JdUFFoce8REIWpXmA...

CVE-2024-53948

creationtimestamp| type| source ---|---|--- 2024-12-09 16:22:17+00:00| seen| https://t.me/cvedetector/12394 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18 16:44:36+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764...

Malicious code in mona-plugin-events (npm)

--- -= Per source details. Do not edit below this line.=-...

Apache NimBLE out-of-bounds read vulnerability (CNVD-2024-47712)

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation, USA, that completely replaces the proprietary SoftDevice on Nordic chipsets.It is part of the Apache Mynewt project. An out-of-bounds read vulnerability exists in Apache NimBLE, which can be...

CVE-2024-53867

Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1...

UBUNTU-CVE-2024-53867

Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1...

CVE-2024-52466

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Explara Explara Events explara-events allows Reflected XSS.This issue affects Explara Events: from n/a through = 0.1.3...

CVE-2024-52466

CVE-2024-52466 is a WordPress vulnerability in the Explara Events plugin, affecting versions up to 0.1.3. It is a reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The CVSS 3.1 base score is 7.1 (HIGH) with network attack vector, no privilege...

CVE-2024-52466 WordPress Explara Events plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Explara Explara Events explara-events allows Reflected XSS.This issue affects Explara Events: from n/a through = 0.1.3...

CVE-2024-52466 WordPress Explara Events plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Explara Explara Events explara-events allows Reflected XSS.This issue affects Explara Events: from n/a through = 0.1.3...

PT-2024-35306 · Unknown · Explara Events

Name of the Vulnerable Software and Affected Versions: Explara Events versions 0.1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious scripts in...

WordPress plugin Explara Events 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

CVE-2024-42327

creationtimestamp| type| source ---|---|--- 2024-11-27 12:15:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113554863211557834 2024-11-27 12:18:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113554877465801853 2024-11-30 06:16:53+00:00| seen| https://t.me/icscert/969...

CVE-2024-11796

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1622/ 2024-11-28 00:12:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113557685605490012 2024-12-03 11:00:00+00:00| seen|...