Lucene search
+L

217 matches found

Prion
Prion
added 2024/03/01 5:15 p.m.16 views

Sql injection

A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 and classified as critical. This vulnerability affects unknown code of the file viewpost.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...

6.5CVSS7.9AI score0.00692EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/03/01 5:0 p.m.41 views

CVE-2024-2073 SourceCodester Block Inserter for Dynamic Content view_post.php sql injection

A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 and classified as critical. This vulnerability affects unknown code of the file viewpost.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...

6.5CVSS7.2AI score0.00692EPSS
SaveExploits1References3
CVE
CVE
added 2024/03/01 5:0 p.m.86 views

CVE-2024-2073

CVE-2024-2073 affects SourceCodester Block Inserter for Dynamic Content 1.0, with a SQL injection in the view_post.php file triggered by the id parameter. The vulnerability is exploitable remotely and public exploits are reported; multiple sources (Red Hat, CVE boards, vulnerability catalogs) con...

8.8CVSS6.9AI score0.00692EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2024/03/01 12:0 a.m.12 views

Block Inserter for Dynamic Content SQL Injection Vulnerability

Block Inserter for Dynamic Content is a simple web application by oretnom23 Individual Developer for inserting one or more blocks into site pages with dynamic content. A SQL injection vulnerability exists in Block Inserter for Dynamic Content version 1.0, which stems from an SQL injection issue i...

8.8CVSS7.9AI score0.00692EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/03/01 12:0 a.m.11 views

PT-2024-18698 · Unknown · Sourcecodester Block Inserter For Dynamic Content

Name of the Vulnerable Software and Affected Versions: SourceCodester Block Inserter for Dynamic Content version 1.0 Description: A critical issue has been discovered, affecting the view post.php file. The manipulation of the id argument leads to SQL injection. This issue can be initiated remotel...

8.8CVSS7.9AI score0.00692EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
added 2023/11/27 12:0 a.m.4 views

VulnCheck KEV: CVE-2018-3810

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code via the sgcgoogleanalytic parameter that runs on all pages served by WordPress. The saveGoogleCode function...

9.8CVSS7.5AI score0.91141EPSS
SaveExploits5References1
NVD
NVD
added 2023/10/20 8:15 a.m.35 views

CVE-2023-4668

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins present and active, active theme,...

7.5CVSS6AI score0.00512EPSS
SaveExploits0References2
Prion
Prion
added 2023/10/20 8:15 a.m.32 views

Code injection

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins present and active, active theme,...

5CVSS7.5AI score0.00512EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/10/20 7:29 a.m.77 views

CVE-2023-4668

The WordPress Ad Inserter plugin (

7.5CVSS7.1AI score0.00512EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2023/10/20 12:0 a.m.16 views

Ad Inserter – Ad Manager & AdSense Ads < 2.7.31 - Unauthenticated Sensitive Information Exposure

Description The plugin exposes sensitive information to unauthenticated users...

5.3CVSS6.2AI score0.00642EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.8 views

WordPress Plugin Ad Inserter Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.5CVSS6.7AI score0.00512EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2023/10/20 12:0 a.m.33 views

Ad Inserter – Ad Manager & AdSense Ads < 2.7.31 - Unauthenticated Sensitive Information Exposure

Description The plugin is vulnerable to Sensitive Information Exposure via the ai-debug-processing-fe URL parameter...

7.5CVSS6.4AI score0.00512EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2023/10/19 2:15 a.m.8 views

CVE-2023-4645

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the aiajax function. This can allow unauthenticated attackers to extract sensitive data such as post titles and slugs including those of protected posts along with their...

5.3CVSS6.5AI score0.00642EPSS
SaveExploits0References3
NVD
NVD
added 2023/10/19 2:15 a.m.15 views

CVE-2023-4645

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the aiajax function. This can allow unauthenticated attackers to extract sensitive data such as post titles and slugs including those of protected posts along with their...

5.3CVSS5.3AI score0.00642EPSS
SaveExploits0References3
Prion
Prion
added 2023/10/19 2:15 a.m.22 views

Design/Logic Flaw

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the aiajax function. This can allow unauthenticated attackers to extract sensitive data such as post titles and slugs including those of protected posts along with their...

5CVSS5.3AI score0.00642EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/19 1:53 a.m.9 views

CVE-2023-4645 Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the aiajax function. This can allow unauthenticated attackers to extract sensitive data such as post titles and slugs including those of protected posts along with their...

5.3CVSS6.6AI score0.00642EPSS
SaveExploits0References3
CVE
CVE
added 2023/10/19 1:53 a.m.71 views

CVE-2023-4645

CVE-2023-4645 affects the WordPress plugin Ad Inserter (up to version 2.7.30). The vulnerability arises in the ai_ajax function (and related ai-debug-processing-fe path) and allows unauthenticated attackers to exfiltrate sensitive data such as post titles and slugs (including protected posts with...

5.3CVSS5.5AI score0.00642EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/10/19 12:0 a.m.7 views

WordPress Plugin Ad Inserter Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.6AI score0.00642EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/09/25 12:0 a.m.16 views

WordPress Ad Inserter Plugin <= 2.7.30 is vulnerable to Sensitive Data Exposure

Software Ad Inserter Type Plugin Vulnerable versions = 2.7.30 Fixed in 2.7.31 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-4668 Patch priority Low CVSS severity Low 5.3 Developer Igor Funa PSID c1880bc4c6b9 Credits Marco Wotschka Required privilege...

7.5CVSS6.9AI score0.00512EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/09/25 12:0 a.m.15 views

WordPress Ad Inserter Plugin <= 2.7.30 is vulnerable to Sensitive Data Exposure

Software Ad Inserter Type Plugin Vulnerable versions = 2.7.30 Fixed in 2.7.31 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-4645 Patch priority Low CVSS severity Low 5.3 Developer Igor Funa PSID d835574a9ec2 Credits Marco Wotschka Required privilege...

5.3CVSS6.9AI score0.00642EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder