3154 matches found
PT-2023-29906 · G5Theme · G5Theme Grid Plus
Name of the Vulnerable Software and Affected Versions: G5Theme Grid Plus – Unlimited grid plugin versions = 1.3.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a...
WordPress plugin Grid Plus - Unlimited grid cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
CVE-2023-33558
An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...
CVE-2023-33558
An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...
Information disclosure
An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...
CVE-2023-33558
An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...
CVE-2023-33558
CVE-2023-33558 affects OcoMon (Ocomon) prior to version 4.0.1. The vulnerability is an information disclosure in the component users-grid-data.php, allowing attackers to obtain sensitive information such as emails and usernames. Affected software: Ocomon before 4.0.1; root cause: information disc...
WordPress Grid Plus Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
Software Grid Plus Type Plugin Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46209 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 08eeb73facf3 Credits Le Ngoc Anh Required...
JVN#95981460: Improper restriction of XML external entity references (XXE) in Proself
Proself provided by North Grid Corporation improperly restricts XML external entity references XXE CWE-611. The developer states that attacks exploiting this vulnerability have been observed. Impact By processing a specially crafted request containing malformed XML data, arbitrary files on the...
Important: Red Hat Security Advisory: Red Hat Data Grid 8.4.5 security update
An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
Responsive Gallery Grid <= 2.3.10 - Settings Update via CSRF
Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
The Post Grid < 7.2.8 - Block CSS Update via CSRF
Description The plugin does not have CSRF check when updating its block CSS, which could allow attackers to make logged in admins perform such action via a CSRF attack...
PT-2023-24383 · Ocomon · Ocomon
Name of the Vulnerable Software and Affected Versions: Ocomon versions prior to 4.0.1 Description: An information disclosure issue in the component users-grid-data.php of Ocomon allows attackers to obtain sensitive information such as e-mails and usernames. Recommendations: For versions prior to...
CVE-2023-41659
Cross-Site Request Forgery CSRF vulnerability in Jules Colle, BDWM Responsive Gallery Grid plugin = 2.3.10 versions...
CVE-2023-41659
Cross-Site Request Forgery CSRF vulnerability in Jules Colle, BDWM Responsive Gallery Grid plugin = 2.3.10 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Jules Colle, BDWM Responsive Gallery Grid plugin = 2.3.10 versions...
CVE-2023-41659
CVE-2023-41659 : WordPress plugin “Responsive Gallery Grid” (BDWM/Responsive Gallery Grid, <= 2.3.10) suffers a Cross-Site Request Forgery (CSRF) vulnerability in its settings update, allowing unauthenticated actions on affected sites. Patchstack reports a fixed release in 2.3.14; prior report...
CVE-2023-41659 WordPress Responsive Gallery Grid Plugin <= 2.3.10 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Jules Colle, BDWM Responsive Gallery Grid plugin = 2.3.10 versions...
WordPress Plugin Responsive Gallery Grid Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...