9778 matches found
WordPress EventPrime plugin <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure vulnerability
Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure vulnerability discovered by Miguel Santareno in WordPress Plugin EventPrime versions = 4.0.4.3...
WordPress plugin EventPrime 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2021-43446
creationtimestamp| type| source ---|---|--- 2024-09-09 23:10:40+00:00| seen| https://t.me/cvedetector/5134 2024-09-09 23:10:47+00:00| seen| https://t.me/cvedetector/5139...
CVE-2024-8538
creationtimestamp| type| source ---|---|--- 2024-09-07 11:49:19+00:00| seen| https://t.me/cvedetector/5015 2024-09-07 16:30:38+00:00| seen| https://t.me/HackerArsenal/291...
CVE-2024-7611
The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' attribute of the Events Card widget in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied...
CVE-2024-45299 alf.io's preloaded data as json is not escaped correctly
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, the preloaded data as json is not escaped correctly, the administrator / event admin could break their own install by inserting non correctly escaped text. The...
CVE-2024-44082
creationtimestamp| type| source ---|---|--- 2024-09-06 04:04:08+00:00| seen| https://t.me/cvedetector/4945 2024-09-08 17:48:00+00:00| seen| https://t.me/HackingInsights/12468...
openSUSE Security Advisory (SUSE-SU-2024:3091-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-38451 · WordPress · Enter Addons – Ultimate Template Builder For Elementor
Name of the Vulnerable Software and Affected Versions: Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress versions up to, and including, 2.1.8 Description: The issue is related to Stored Cross-Site Scripting via the tag attribute of the Events Card widget due to...
DEBIAN-CVE-2024-8382
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had...
WordPress WP Events Manager plugin <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection vulnerability
Authenticated Subscriber+ Time-Based SQL Injection vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin WP Events Manager versions = 2.1.11...
WordPress WP Events Manager Plugin <= 2.1.11 is vulnerable to SQL Injection
Software WP Events Manager Type Plugin Vulnerable versions = 2.1.11 Fixed in 2.2.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-7717 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 8f6af9be273e Credits Arkadiusz Hydzik Required privilege Subscribe...
WordPress Modern Events Calendar SQL Injection Scanner
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Modern Events Calendar SQLi Scanner', 'Description' = %q Modern Events Calendar plugin contains an unauthenticated timebased SQL...
CVE-2024-7717
The WP Events Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 2.1.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2024-7717
CVE-2024-7717 – In WP Events Manager for WordPress, there is a time-based SQL Injection in the order parameter affecting all versions up to 2.1.11. Exploitation requires Subscriber+ level authentication and can cause injection of additional SQL to extract sensitive data. According to connected RH...
CVE-2024-7717 WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection
The WP Events Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 2.1.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
PT-2024-38532 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: WP Events Manager plugin for WordPress versions up to, and including, 2.1.11 Description: The WP Events Manager plugin for WordPress is vulnerable to time-based SQL Injection via the order parameter due to insufficient escaping on the...
WordPress plugin WP Events Manager SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
CVE-2024-8335
creationtimestamp| type| source ---|---|--- 2024-08-30 15:38:20+00:00| seen| https://t.me/Kelvinseccommunity/768 2024-08-30 15:39:07+00:00| seen| https://t.me/cvedetector/4517...
CVE-2024-8016
The Events Calendar Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.0.2 via deserialization of untrusted input from the 'filters' parameter in widgets. This makes it possible for authenticated attackers, with administrator-level access and...