7037 matches found
CVE-2024-54364 WordPress Feedpress Generator plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spartac Feedpress Generator feedpress-generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through = 1.2.1...
CVE-2024-55978 WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...
CVE-2024-55978
CVE-2024-55978 affects Code Generator Pro (WordPress plugin) up to version 1.2 and is described as an unauthenticated SQL Injection due to improper handling of input. Public coverage in connected sources references unauthenticated SQLi on Code Generator Pro and notes that the vulnerability is cur...
CVE-2024-55978 WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...
Malicious code in asymmetric-key-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f4c9090980b70af6effbd1be18a9ca571dd90a4f1cca30d44f84083dcec613 The OpenSSF Package Analysis project identified 'asymmetric-key-generator' @ 9.9.9 npm as malicious. It is considered malicious because: - The...
MAL-2024-11875 Malicious code in asymmetric-key-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f4c9090980b70af6effbd1be18a9ca571dd90a4f1cca30d44f84083dcec613 The OpenSSF Package Analysis project identified 'asymmetric-key-generator' @ 9.9.9 npm as malicious. It is considered malicious because: - The...
PT-2024-36653 · Unknown · Marco Giannini Xml Multilanguage Sitemap Generator
Name of the Vulnerable Software and Affected Versions: Marco Giannini XML Multilanguage Sitemap Generator versions 2.0.6 and earlier Description: The issue is related to a missing authorization vulnerability in the Marco Giannini XML Multilanguage Sitemap Generator. This vulnerability affects the...
WordPress plugin Code Generator Pro SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin XML Multilanguage Sitemap Generator versions = 2.0.6...
WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Code Generator Pro versions = 1.2...
CVE-2023-38477
Missing Authorization vulnerability in stasionok QR code MeCard/vCard generator wp-qrcode-me-v-card allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through = 1.6.0...
CVE-2023-38477
Missing Authorization vulnerability in Stanislav Kuznetsov QR code MeCard/vCard generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through 1.6.0...
SonicWALL SMA100 Encryption Issue Vulnerability
The SonicWALL SMA100 is a secure access gateway appliance from SonicWALL USA. The SonicWALL SMA100 suffers from a cryptographic issue vulnerability that stems from the use of a weakly encrypted pseudo-random number generator in the backup code generator. An attacker could exploit the vulnerabilit...
media: v4l2-tpg: prevent the risk of a division by zero
...
CVE-2024-11709 AI Post Generator | AutoWriter <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion
The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aipostgeneratordeletePost AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated attackers, with...
CVE-2024-11709 AI Post Generator | AutoWriter <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion
The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aipostgeneratordeletePost AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated attackers, with...
CVE-2024-11709
CVE-2024-11709 concerns the WordPress plugin AI Post Generator | AutoWriter. The vulnerability stems from a missing capability check on the ai_post_generator_delete_Post AJAX action, affecting all versions up to 3.5. The flaw enables authenticated attackers with Contributor-level access or higher...
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.5 - Arbitrary File Read vulnerability
Arbitrary File Read vulnerability discovered by thiennv in WordPress Plugin PDF Generator Addon for Elementor Page Builder versions = 1.7.5...
WordPress AI Post Generator | AutoWriter plugin <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion vulnerability
Missing Authorization to Authenticated Contributor+ Post/Page Deletion vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin AI Post Generator | AutoWriter versions = 3.5...
WordPress Feedpress Generator plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Feedpress Generator versions = 1.2.1...