CVE-2024-49286 WordPress SSV Events plugin <= 3.2.7 - Local File Inclusion to RCE vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Jeroen Berkvens SSV Events ssv-events allows PHP Local File Inclusion.This issue affects SSV Events: from n/a through = 3.2.7...

CVE-2024-49286 WordPress SSV Events plugin <= 3.2.7 - Local File Inclusion to RCE vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Jeroen Berkvens SSV Events ssv-events allows PHP Local File Inclusion.This issue affects SSV Events: from n/a through = 3.2.7...

CVE-2024-49286

CVE-2024-49286 affects WordPress SSV Events plugin ≤ 3.2.7 (Moridrin SSV Events). A path traversal flaw permits PHP Local File Inclusion, effectively enabling Remote Code Execution. Affected versions: 3.2.7 and earlier. Root cause: improper restriction of pathnames to restricted directories. Expl...

PT-2024-33426 · Unknown · Moridrin Ssv Events

Name of the Vulnerable Software and Affected Versions: Moridrin SSV Events versions 3.2.7 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, which allows PHP Local File Inclusion in...

WordPress plugin SSV Events 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

CVE-2024-9897

creationtimestamp| type| source ---|---|--- 2024-10-19 12:59:08+00:00| seen| https://t.me/cvedetector/8357 2024-10-19 15:27:50+00:00| seen| https://t.me/HackerArsenal/566...

CVE-2024-10133

creationtimestamp| type| source ---|---|--- 2024-10-19 12:08:57+00:00| seen| https://t.me/cvedetector/8356 2024-10-19 15:27:50+00:00| seen| https://t.me/HackerArsenal/564...

CVE-2024-9889

creationtimestamp| type| source ---|---|--- 2024-10-19 09:38:25+00:00| seen| https://t.me/cvedetector/8354 2024-10-19 15:27:50+00:00| seen| https://t.me/HackerArsenal/563...

CVE-2024-49311

creationtimestamp| type| source ---|---|--- 2024-10-17 21:40:18+00:00| seen| https://t.me/cvedetector/8229 2025-02-14 10:03:16+00:00| seen| Telegram/oBlVsqXAL8EGbtisIFjIQX8Dh7O1okayu5AcHl0j9eDCoGH...

CVE-2024-49264

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows Stored XSS.This issue affects Events Addon for Elementor: from n/a through = 2.2.0...

CVE-2024-49264

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in NicheAddons Events Addon for Elementor allows Stored XSS.This issue affects Events Addon for Elementor: from n/a through 2.2.0...

CVE-2024-49264

CVE-2024-49264 describes a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Event Addon for Elementor (Events Addon for Elementor) that allowed stored XSS vulnerabilities in versions up to 2.2.0. The issue stems from improper neutralization of input during web page generation. Pub...

WordPress plugin Events Addon for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Protecting major events: An incident response blueprint

Ensuring the cybersecurity of major events -- whether it's sports, professional conferences, expos, inter-government meetings or other gatherings -- is a complex and time-intensive task. It requires a comprehensive approach and collaboration among various stakeholders, including vendors,...

CVE-2024-8787

creationtimestamp| type| source ---|---|--- 2024-10-16 05:29:20+00:00| seen| https://t.me/cvedetector/7996 2025-02-14 10:04:00+00:00| seen| Telegram/00cPiTRmFZhMxw4SiO87Xm0e81TTgTP4pNULTZ98p6Qz-nym...

CVE-2024-49387

creationtimestamp| type| source ---|---|--- 2024-10-15 14:25:49+00:00| seen| https://t.me/cvedetector/7908 2025-02-06 02:41:38+00:00| seen| Telegram/Z18MI9JqVWCZAomxYWeAKXbHP14AJm9xHu7BtkVVBEDh44e...

CVE-2024-49382

creationtimestamp| type| source ---|---|--- 2024-10-15 14:25:44+00:00| seen| https://t.me/cvedetector/7905 2025-02-06 02:41:38+00:00| seen| Telegram/O8MzTxbGhPAzodGHTGZtqNnqA4c5abAN3PYRHRnQrXrCzBi8...

WordPress SSV Events plugin <= 3.2.7 - Local File Inclusion to RCE vulnerability

Local File Inclusion to RCE vulnerability discovered by tahu.datar Patchstack Alliance in WordPress Plugin SSV Events versions = 3.2.7...

WordPress SSV Events Plugin <= 3.2.7 is vulnerable to Local File Inclusion

Software SSV Events Type Plugin Vulnerable versions = 3.2.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-49286 Patch priority High CVSS severity High 9.6 Developer Claim ownership PSID ad40e495904a Credits tahu.datar Required privilege Unauthenticated...

WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Events Addon for Elementor versions = 2.2.0...