CVE-2024-56268

CVE-2024-56268 is a stored XSS in the WordPress plugin Post Grid Elementor Addon (also referred to as WP Post Grid Elementor Addon) caused by improper input neutralization during web page generation. Affected versions are reported as up to 2.0.18 (n/a through 2.0.18). Evidence in connected docume...

WordPress plugin Post Grid Elementor Addon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2024-56230

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Maidul Dynamic Product Category Grid, Slider for WooCommerce dynamic-product-categories-design allows PHP Local File Inclusion.This issue affects Dynamic Product Category Grid,...

CVE-2024-56230

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dynamic Web Lab Dynamic Product Category Grid, Slider for WooCommerce allows PHP Local File Inclusion.This issue affects Dynamic Product Category Grid, Slider for WooCommerce: fr...

CVE-2024-56230

CVE-2024-56230 affects the WordPress plugin Dynamic Product Category Grid, Slider for WooCommerce . The issue is an authenticated Local File Inclusion (LFI) caused by improper control of the filename for include/require in PHP, enabling an attacker with Contributor+ privileges to cause inclusion ...

CVE-2024-56230 WordPress Dynamic Product Category Grid, Slider for WooCommerce plugin <= 1.1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dynamic Web Lab Dynamic Product Category Grid, Slider for WooCommerce allows PHP Local File Inclusion.This issue affects Dynamic Product Category Grid, Slider for WooCommerce: fr...

PT-2024-36766 · Woocommerce · Dynamic Product Category Grid

Name of the Vulnerable Software and Affected Versions: Dynamic Product Category Grid, Slider for WooCommerce versions 1.1.3 and earlier Description: The issue is related to improper control of filename for Include/Require Statement in PHP Program, allowing PHP Local File Inclusion. This problem c...

WordPress Post Grid Elementor Addon plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Post Grid Elementor Addon versions = 2.0.18...

WordPress Dynamic Product Category Grid, Slider for WooCommerce plugin <= 1.1.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Dynamic Product Category Grid, Slider for WooCommerce versions = 1.1.3...

Malicious code in grid-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3f459ed60b15a8a5c508fed9f7ebd2f7707ebbb1420e814add93920322749ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11989 Malicious code in grid-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3f459ed60b15a8a5c508fed9f7ebd2f7707ebbb1420e814add93920322749ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-54408

Cross-Site Request Forgery CSRF vulnerability in codehandling Youtube Video Grid youmax-channel-embeds-for-youtube-businesses allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through = 1.9...

CVE-2024-54408 WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in codehandling Youtube Video Grid youmax-channel-embeds-for-youtube-businesses allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through = 1.9...

CVE-2024-54408 WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jake H. Youtube Video Grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through 1.9...

CVE-2024-54408

CVE-2024-54408 affects Youmax Channel Embeds for YouTube Businesses (Youtube Video Grid) via Cross-Site Request Forgery. Public details show a CSRF vulnerability caused by incorrectly configured access control, enabling settings changes via CSRF for Youtube Video Grid: from n/a through

PT-2024-36295 · Unknown · Youtube Video Grid

Name of the Vulnerable Software and Affected Versions: Jake H. Youtube Video Grid versions n/a through 1.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can be exploited due to incorrectly configured access control security levels. This allows for the...

WordPress plugin Youtube Video Grid 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2023-34014

Missing Authorization vulnerability in G5Theme Grid Plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grid Plus: from n/a through 1.3.2...

CVE-2023-34014

Missing Authorization vulnerability in g5theme Grid Plus grid-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grid Plus: from n/a through = 1.3.2...

CVE-2023-34014

CVE-2023-34014 affects the WordPress Grid Plus plugin ≤ 1.3.2. The root cause is a missing authorization check (Broken Access Control), with CVSS v3.1 base score 5.4 (Medium). Patchstack notes a fix in 1.3.3; older versions are at risk due to misconfigured access control. Exploitation details are...