228 matches found
WordPress plugin Greenshift 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2024-50419
Incorrect Authorization vulnerability in Wpsoul Greenshift – animation and page builder blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift – animation and page builder blocks: from n/a through 9.7...
CVE-2024-50419
Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift: from n/a through = 9.7...
CVE-2024-50419 WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability
Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift: from n/a through = 9.7...
CVE-2024-50419 WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability
Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift: from n/a through = 9.7...
CVE-2024-50419
CVE-2024-50419 affects Greenshift – animation and page builder blocks (WordPress plugin) up to version 9.7. Root cause: Incorrect Authorization / Broken access control due to misconfigured access security levels. Public CVSS data from NVD cites a 3.1 base score of 9.8 (C/H/I/A). Patch available i...
WordPress plugin Greenshift 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-34193 · Unknown · Wpsoul Greenshift
Name of the Vulnerable Software and Affected Versions: Wpsoul Greenshift – animation and page builder blocks versions 9.7 and earlier Description: The issue is related to Incorrect Authorization, allowing exploitation due to incorrectly configured access control security levels. Recommendations:...
WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Greenshift versions = 9.7...
WordPress Greenshift – animation and page builder blocks Plugin <=9.7 is vulnerable to Broken Access Control
Software Greenshift – animation and page builder blocks Type Plugin Vulnerable versions =9.7 Fixed in 9.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-50419 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 57f806386637 Credits...
CVE-2024-44005
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n/a through = 9.3.7...
CVE-2024-44005
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wpsoul Greenshift – animation and page builder blocks allows Stored XSS.This issue affects Greenshift – animation and page builder blocks: from n/a through 9.3.7...
CVE-2024-44005
CVE-2024-44005 affects the WordPress plugin Greenshift – animation and page builder blocks. It is a Stored XSS due to improper neutralization during web page generation, impacting Greenshift blocks up to version 9.3.7. Mitigation: upgrade to version 9.4 or later; as an interim measure, restrict a...
CVE-2024-44005 WordPress Greenshift – animation and page builder blocks plugin <= 9.3.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wpsoul Greenshift – animation and page builder blocks allows Stored XSS.This issue affects Greenshift – animation and page builder blocks: from n/a through 9.3.7...
CVE-2024-44005 WordPress Greenshift plugin <= 9.3.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n/a through = 9.3.7...
PT-2024-30870 · Unknown · Wpsoul Greenshift
Name of the Vulnerable Software and Affected Versions: Wpsoul Greenshift – animation and page builder blocks versions 9.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored...
WordPress plugin Greenshift 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Greenshift plugin <= 9.3.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Greenshift versions = 9.3.7...
WordPress Greenshift – animation and page builder blocks Plugin <= 9.3.7 is vulnerable to Cross Site Scripting (XSS)
Software Greenshift – animation and page builder blocks Type Plugin Vulnerable versions = 9.3.7 Fixed in 9.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44005 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6b98adee659f Credits João Pedr...
CVE-2024-43943
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wpsoul Greenshift Woocommerce Addon allows SQL Injection.This issue affects Greenshift Woocommerce Addon: from n/a before 1.9.8...