WordPress JetTabs plugin <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion vulnerability

Authenticated Contributor+ Arbitrary Local File Inclusion vulnerability discovered by stealthcopter in WordPress Plugin JetTabs versions = 2.2.3...

WordPress JetTabs Plugin <= 2.2.3 is vulnerable to Local File Inclusion

Software JetTabs Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.3.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-7146 Patch priority Low CVSS severity Low 7.5 Developer Crocoblock PSID 3cf3db0c539a Credits stealthcopter Required privilege Contributor Published...

WordPress plugin JetTabs for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-38109 · WordPress · Jettabs For Elementor

Name of the Vulnerable Software and Affected Versions: JetTabs for Elementor plugin for WordPress versions up to and including 2.2.3 Description: The issue allows authenticated attackers with Contributor-level access and above to include and execute arbitrary files on the server via the switcher...

WordPress JetTabs Plugin <= 2.1.25.1 is vulnerable to Broken Access Control

Software JetTabs Type Plugin Vulnerable versions = 2.1.25.1 Fixed in 2.1.25.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48760 Patch priority Medium CVSS severity Medium 8.2 Developer Crocoblock PSID e010512426cf Credits Rafie Muhammad Patchstack...

WordPress JetTabs Plugin <= 2.1.25.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software JetTabs Type Plugin Vulnerable versions = 2.1.25.1 Fixed in 2.1.25.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48762 Patch priority Low CVSS severity Low 6.3 Developer Crocoblock PSID 6d9f8f2ea4be Credits Rafie Muhammad Patchstack...

WordPress JetTabs Plugin <= 2.1.25.1 is vulnerable to Broken Access Control

Software JetTabs Type Plugin Vulnerable versions = 2.1.25.1 Fixed in 2.1.25.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48761 Patch priority Medium CVSS severity Medium 6.3 Developer Crocoblock PSID 05f1f67c4d40 Credits Rafie Muhammad Patchstack...