3158 matches found
Malicious code in @ag-grid-react/lib (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-2484
The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
CVE-2024-2484
The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
WordPress plugin Orbit Fox by ThemeIsle security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
CVE-2023-47771
Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18...
CVE-2023-47771 WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability
Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18...
CVE-2023-47771 WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability
Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18...
WordPress plugin Essential Grid security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-4305
The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Si...
CVE-2024-4305
CVE-2024-4305 affects the WordPress plugin combination “Post Grid Gutenberg Blocks and WordPress Blog Plugin.” The description in the sources specifies that versions before 4.1.0 do not validate and escape certain block options before they are output in a page/post where the block is embedded, wh...
Exploit for CVE-2024-5326
CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and Wor...
CVE-2024-31246
Missing Authorization vulnerability in Post Grid Team by WPXPO PostX – Gutenberg Blocks for Post Grid.This issue affects PostX – Gutenberg Blocks for Post Grid: from n/a through 3.2.3...
CVE-2024-31246 WordPress PostX plugin <= 3.2.3 - Author+ Post/Page Duplication vulnerability
Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 3.2.3...
CVE-2024-31246 WordPress PostX plugin <= 3.2.3 - Author+ Post/Page Duplication vulnerability
Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 3.2.3...
CVE-2024-31246
CVE-2024-31246 is a Missing Authorization vulnerability in PostX – Gutenberg Blocks for Post Grid (Post Grid Team by WPXPO). Affected: PostX – Gutenberg Blocks for Post Grid, versions up to and including 3.2.3 (n/a–3.2.3). Root cause: missing authorization allows unauthorized access/modification ...
PT-2024-23888 · Wpxpo · Postx – Gutenberg Blocks For Post Grid
Name of the Vulnerable Software and Affected Versions: PostX – Gutenberg Blocks for Post Grid versions 3.2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in Post Grid Team by WPXPO. This vulnerability affects PostX – Gutenberg Blocks for Post Grid...
CVE-2024-35739
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RadiusTheme The Post Grid allows Stored XSS.This issue affects The Post Grid: from n/a through 7.7.1...
CVE-2024-35739 WordPress The Post Grid plugin <= 7.7.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through = 7.7.1...
CVE-2024-5758
Rejected reason: REJECT Duplicate of CVE-2024-4305. Please use CVE-2024-4305 instead...
WordPress plugin The Post Grid cross-site scripting vulnerability
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...