167 matches found
CVE-2023-45656 WordPress Lazy Load for Videos Plugin <= 2.18.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Kevin Weber Lazy Load for Videos plugin = 2.18.2 versions...
CVE-2023-45656
CVE-2023-45656 concerns the WordPress plugin Kevin Weber Lazy Load for Videos (versions
WordPress Plugin Lazy Load for Videos Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Lazy Load for Videos suffe...
CVE-2023-45656: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Kevin Weber Lazy Load for Videos plugin = 2.18.2 versions...
CVE-2023-30200
In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” ultimateimagetool in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack...
CVE-2023-30200: Improper Limitation of a Pathname to a Restricted Directory
In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” ultimateimagetool in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack...
CVE-2022-0969
CVE-2022-0969 affects the WordPress Optimole plugin prior to 3.3.2. The issue is that the settings for “Lazyload background images for selectors” are not properly sanitised/escaped, which could allow high-privilege users (e.g., admins) to perform Cross-Site Scripting even when unfiltered_html is ...
CVE-2022-0969 Image optimization & Lazy Load < 3.3.2 - Admin+ Stored Cross-Site Scripting
The Image optimization & Lazy Load by Optimole WordPress plugin before 3.3.2 does not sanitise and escape its "Lazyload background images for selectors" settings, which could allow high privilege users such as admin to perform Cross-Site scripting attacks even when the unfilteredhtml capability i...
CVE-2022-0969 Image optimization & Lazy Load < 3.3.2 - Admin+ Stored Cross-Site Scripting
The Image optimization & Lazy Load by Optimole WordPress plugin before 3.3.2 does not sanitise and escape its "Lazyload background images for selectors" settings, which could allow high privilege users such as admin to perform Cross-Site scripting attacks even when the unfilteredhtml capability i...
PT-2022-13568
Name of the Vulnerable Software and Affected Versions Image optimization & Lazy Load by Optimole WordPress plugin versions prior to 3.3.2 Description The issue allows high privilege users, such as admins, to perform Cross-Site scripting attacks due to the lack of sanitization and escaping in the...
CVE-2022-0969: Improper Neutralization of Input During Web Page Generation
The Image optimization & Lazy Load by Optimole WordPress plugin before 3.3.2 does not sanitise and escape its "Lazyload background images for selectors" settings, which could allow high privilege users such as admin to perform Cross-Site scripting attacks even when the unfilteredhtml capability i...
Image optimization & Lazy Load < 3.3.2 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape its "Lazyload background images for selectors" settings, which could allow high privilege users such as admin to perform Cross-Site scripting attacks even when the unfilteredhtml capability is disallowed. PoC Put the following payload in the Media Optimole...
Accelerate SVG Delivery with Ion (A2)
As of March 2020, all Akamai Ion customers will benefit automatically from the more powerful Brotli/Zopfli compression algorithm for delivering their SVG files. The benefit of fewer SVG bytes is a positive impact on your visual performance KPIs First Meaningful Paint, Time to Visually Ready,...
CVE-2015-9415
The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion...
CVE-2015-9415
The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion...
EUVD-2015-9255
The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion...
CVE-2015-9415
The bj-lazy-load plugin for WordPress (versions prior to 1.0 ) is vulnerable to Remote File Inclusion (RFI) via the TimThumb component. An attacker can exploit this improper input validation to include and execute remote malicious files, which may lead to remote code execution (RCE) and a complet...
PT-2019-7374
Name of the Vulnerable Software and Affected Versions bj-lazy-load plugin versions prior to 1.0 for WordPress Description The issue concerns Remote File Inclusion in the bj-lazy-load plugin for WordPress. Recommendations For versions prior to 1.0, update to version 1.0 or later to resolve the iss...
WordPress bj-lazy-load plugin remote file inclusion vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bj-lazy-load is a page content delayed loading plugin used in it. A remote file inclusion vulnerability exists in versions of the...