WordPress wp-front-end-profile plugin permissions permission and access control issues vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-front-end-profile is a front-end configuration plugin used in it. The WordPress wp-front-end-profile plugin is vulnerable to...

UBUNTU-CVE-2019-10222

A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients...

WordPress wp-front-end-profile plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress wp-front-end-profile plugin. An attacker can...

CVE-2019-15111

The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue...

CVE-2019-15110

The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS...

CVE-2017-18539

The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes...

CVE-2017-18540

The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes...

CVE-2017-18538

The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes...

CVE-2017-18538

The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes...

CVE-2017-18539

The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes...

CVE-2017-18540

The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes...

Design/Logic Flaw

The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes...

Design/Logic Flaw

The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes...

CVE-2019-15111

CVE-2019-15111 affects the WordPress plugin wp-front-end-profile before 0.2.2. The root cause is a permissions/ACL flaw in the plugin that lets an attacker modify a user profile via POST data, overwriting wp_capabilities and wp_user_level to escalate privileges to administrator. Some reports also...

CVE-2019-15110

CVE-2019-15110 affects the WordPress plugin wp-front-end-profile prior to 0.2.2. The vulnerability is cross-site scripting (XSS). Public exploit details (WP Front End Profile

CVE-2017-18539

The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes...

CVE-2017-18538

The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes...

PT-2019-8472 · Unknown · Weblibrarian

Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.5 Description: The issue concerns a problem with front-end short codes, allowing for XSS attacks. Recommendations: For versions prior to 3.4.8.5, update to version 3.4.8.5 or later to resolve the...

PT-2019-8473 · WordPress · Weblibrarian

Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.6 for WordPress Description: The issue concerns a Cross-Site Scripting XSS vulnerability. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website,...

PT-2019-8474 · Unknown · Weblibrarian Plugin

Name of the Vulnerable Software and Affected Versions: weblibrarian plugin versions prior to 3.4.8.7 Description: The issue allows for cross-site scripting XSS attacks via front-end short codes. Recommendations: For versions prior to 3.4.8.7, update to version 3.4.8.7 or later to resolve the issu...