Lucene search
+L

244 matches found

Patchstack
Patchstack
added 2024/07/01 3:46 a.m.10 views

WordPress Funnel Builder for WordPress by FunnelKit plugin <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG Upload vulnerability discovered by wesley wcraft in WordPress Plugin Funnel Builder by FunnelKit versions = 3.3.1...

6.4CVSS5.8AI score0.00329EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/07/01 12:0 a.m.15 views

WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Funnel Builder for WordPress by FunnelKit Type Plugin Vulnerable versions = 3.3.1 Fixed in 3.4.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5192 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 870779297d34 Credit...

6.4CVSS5.9AI score0.00329EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/06/29 12:0 a.m.6 views

WordPress plugin Funnel Builder for WordPress by FunnelKit security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability i...

6.4CVSS6.1AI score0.00329EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/06/29 12:0 a.m.11 views

PT-2024-35051 · Funnelkit · The Funnel Builder For Wordpress By Funnelkit

Name of the Vulnerable Software and Affected Versions: The Funnel Builder for WordPress by FunnelKit plugin for WordPress versions up to, and including, 3.3.1 Description: The issue is related to Stored Cross-Site Scripting via the mimes parameter due to insufficient input sanitization and output...

6.4CVSS6.2AI score0.00329EPSS
SaveExploits0References8
OSV
OSV
added 2024/06/12 9:15 a.m.8 views

CVE-2023-51671

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

5.4CVSS5.8AI score0.00333EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/12 9:15 a.m.27 views

CVE-2023-51671

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

5.4CVSS0.00333EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/12 9:15 a.m.6 views

CVE-2023-51670

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

4.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/12 9:15 a.m.27 views

CVE-2023-51670

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

4.3CVSS0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/12 8:54 a.m.19 views

CVE-2023-51670 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

4.3CVSS6.9AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/12 8:54 a.m.36 views

CVE-2023-51670 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

4.3CVSS0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/12 8:49 a.m.31 views

CVE-2023-51671 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

5.4CVSS0.00333EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/12 8:49 a.m.15 views

CVE-2023-51671 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

5.4CVSS6.9AI score0.00333EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/12 12:0 a.m.8 views

WordPress plugin FunnelKit Checkout security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.8AI score0.00294EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/12 12:0 a.m.7 views

WordPress plugin FunnelKit Checkout security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.8AI score0.00333EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/11 1:22 a.m.22 views

CVE-2023-51672

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

7.5CVSS7.6AI score0.00529EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/11 12:0 a.m.10 views

WordPress Plugin FunnelKit Checkout 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress Plugin...

7.5CVSS8.7AI score0.00529EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/21 5:25 p.m.16 views

CVE-2023-51672 WordPress FunnelKit Checkout plugin <= 3.10.3 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

7.5CVSS8.6AI score0.00529EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/21 5:25 p.m.31 views

CVE-2023-51672 WordPress FunnelKit Checkout plugin <= 3.10.3 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

7.5CVSS7.8AI score0.00529EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/21 5:15 p.m.19 views

CVE-2024-2580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FunnelKit Automation By Autonami allows Stored XSS.This issue affects Automation By Autonami: from n/a through 2.8.2...

6.5CVSS6.4AI score0.0032EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/21 4:48 p.m.62 views

CVE-2024-2580

CVE-2024-2580 affects WordPress Automation By Autonami (FunnelKit Automations) up to version 2.8.2, with a Stored XSS in Cross Site Scripting via input during web page generation. Root cause: improper input neutralization/output escaping. Impact: potential stored attacker-controlled scripts execu...

6.5CVSS8.6AI score0.0032EPSS
SaveExploits0References1
Rows per page
Query Builder