Lucene search
+L

7037 matches found

Cvelist
Cvelist
added 2024/11/19 4:32 p.m.41 views

CVE-2024-51641 WordPress Advanced PDF Generator plugin <= 0.4.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Juan Camilo Advanced PDF Generator advanced-pdf-generator allows Stored XSS.This issue affects Advanced PDF Generator: from n/a through = 0.4.0...

7.1CVSS0.00206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:32 p.m.13 views

CVE-2024-51641 WordPress Advanced PDF Generator plugin <= 0.4.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Juan Camilo Advanced PDF Generator advanced-pdf-generator allows Stored XSS.This issue affects Advanced PDF Generator: from n/a through = 0.4.0...

7.1CVSS5.9AI score0.00206EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:32 p.m.53 views

CVE-2024-51641

CVE-2024-51641 concerns WordPress Advanced PDF Generator plugin versions

7.1CVSS5.9AI score0.00206EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.8 views

PT-2024-34785 · Unknown · Advanced Pdf Generator

Name of the Vulnerable Software and Affected Versions: Advanced PDF Generator versions 0.4.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web applicatio...

7.1CVSS6.8AI score0.00206EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.7 views

WordPress plugin Advanced PDF Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. A cross-site request forgery...

7.1CVSS6.4AI score0.00206EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/18 10:15 p.m.31 views

CVE-2024-52394

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Stored XSS.This issue affects Print PDF Generator and Publisher: from n/a through = 1.1.6...

6.5CVSS0.00218EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/18 9:26 p.m.35 views

CVE-2024-52394 WordPress Print PDF Generator and Publisher plugin <= 1.1.6 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Stored XSS.This issue affects Print PDF Generator and Publisher: from n/a through = 1.1.6...

6.5CVSS0.00218EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/18 9:26 p.m.61 views

CVE-2024-52394

CVE-2024-52394 is a Stored XSS vulnerability in the WordPress plugin Print PDF Generator and Publisher (nopea.Media) affecting versions &lt;= 1.1.6. The issue results from improper input neutralization during web page generation. Several connected sources confirm the affected software and the XSS...

6.5CVSS7.2AI score0.00218EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/11/18 10:14 a.m.196 views

Exploit for CVE-2024-9935

CVE-2024-9935 PDF Generator Addon for Elementor Page Builder...

7.5CVSS9.3AI score0.07425EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2024/11/18 12:0 a.m.10 views

PT-2024-35232 · Unknown · Nopea.Media Print Pdf Generator/Publisher

Name of the Vulnerable Software and Affected Versions: nopea.Media Print PDF Generator and Publisher versions 1.1.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...

6.5CVSS8.7AI score0.00218EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.12 views

WordPress plugin Print PDF Generator and Publisher 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.2AI score0.00218EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/16 4:15 a.m.38 views

CVE-2024-9935

The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.0.0 via the rtwpgaepbdwnldpdf function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which...

7.5CVSS0.07425EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
added 2024/11/16 3:20 a.m.17 views

CVE-2024-9935 PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download

The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.0.0 via the rtwpgaepbdwnldpdf function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which...

7.5CVSS7.3AI score0.07425EPSS
SaveExploits3References3
CNNVD
CNNVD
added 2024/11/16 12:0 a.m.13 views

WordPress plugin PDF Generator Addon for Elementor Page Builder 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. A path traversal vulnerability...

7.5CVSS7.9AI score0.07425EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2024/11/15 12:0 a.m.12 views

Fedora 41 : aws (2024-7908ee39a9)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-7908ee39a9 advisory. CVE-2024-41708: Ada Web Server did not use a cryptographically secure pseudorandom number generator. AWS.Utils.Random and AWS.Utils.RandomString used...

7.5CVSS5.6AI score0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/15 12:0 a.m.16 views

PT-2024-39950 · WordPress · Pdf Generator Addon For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: PDF Generator Addon for Elementor Page Builder plugin for WordPress versions up to, and including, 1.7.5 Description: The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal. This makes it...

7.5CVSS9.4AI score0.07425EPSS
SaveExploits3References15
NVD
NVD
added 2024/11/14 6:15 p.m.33 views

CVE-2024-52377

Unrestricted Upload of File with Dangerous Type vulnerability in bdthemes Instant Image Generator ai-image allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through = 1.5.2...

10CVSS0.00496EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/11/14 5:42 p.m.17 views

CVE-2024-52377 WordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.4 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in BdThemes Instant Image Generator allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through 1.5.4...

10CVSS7.1AI score0.00496EPSS
SaveExploits1References1
CVE
CVE
added 2024/11/14 5:42 p.m.78 views

CVE-2024-52377

CVE-2024-52377 affects BdThemes Instant Image Generator (WordPress plugin) and allows Unrestricted Upload of a Web Shell by uploading dangerous file types. Affected versions are 1.5.4 and earlier; Patchstack reports a fix in 1.5.3, and Wordfence vulnerability listings reference patched/reduced ex...

10CVSS7.2AI score0.00496EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/11/14 5:42 p.m.36 views

CVE-2024-52377 WordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in bdthemes Instant Image Generator ai-image allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through = 1.5.2...

10CVSS0.00496EPSS
SaveExploits1References1
Rows per page
Query Builder