940 matches found
CVE-2022-38077
Cross-Site Request Forgery CSRF vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin = 2.2.1 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin = 2.2.1 versions...
CVE-2022-38077 WordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin = 2.2.1 versions...
CVE-2022-38077
CVE-2022-38077 is a CSRF vulnerability affecting the WP OnlineSupport / Popup Anything plugin for WordPress, in versions ≤ 2.2.1. The issue permits unauthorized cross-site requests that can be executed by an attacker due to unauthenticated access requirements. A fix has been released: upgrade to ...
CVE-2023-28667
The Lead Generated WordPress Plugin, version = 1.23, was affected by an unauthenticated insecure deserialization issue. The tvelabels parameter of the tveapiformsubmit action is passed to the PHP unserialize function without being sanitized or verified, and as a result could lead to PHP object...
PT-2026-48641
Name of the Vulnerable Software and Affected Versions ThemeHunk Contact Form & Lead Form Elementor Builder versions prior to 1.8.5 Description Missing authorization allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to a version newer than...
CVE-2023-28667
CVE-2023-28667 centers on the Lead Generated WordPress Plugin (version
WordPress Plugin Lead Generated 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
CVE-2023-28667: Deserialization of Untrusted Data
The Lead Generated WordPress Plugin, version = 1.23, was affected by an unauthenticated insecure deserialization issue. The tvelabels parameter of the tveapiformsubmit action is passed to the PHP unserialize function without being sanitized or verified, and as a result could lead to PHP object...
WordPress Icegram Collect – Easy Form, Lead Collection and Subscription plugin Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)
Software Icegram Collect – Easy Form, Lead Collection and Subscription plugin Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25024 Patch priority Low CVSS severity Low 5.9 Developer Claim...
Lead Management System SQL Injection Vulnerability (CNVD-2023-05742)
Lead management system is a lead management system by Mayuri K. Personal developer. SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeCategories.php. An attacker could use th...
Lead Management System SQL Injection Vulnerability (CNVD-2023-05745)
Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the id parameter of removeProduct.php, which could be used by attackers to...
Lead Management System SQL Injection Vulnerability (CNVD-2023-05740)
Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the userid parameter of changePassword.php. An attacker could use this...
Lead Management System SQL Injection Vulnerability (CNVD-2023-05744)
Lead management system is a lead management system developed by Mayuri K. A SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of external input SQL statements in the id parameter of removeOrder.php, and can be exploited by attackers to The...
Lead Management System SQL Injection Vulnerability (CNVD-2023-05739)
Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the customerid parameter in ajaxrepresent.php. statement in ajaxrepresent.php...
Lead Management System SQL Injection Vulnerability (CNVD-2023-05743)
Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeLead.php, which can be exploited by attackers...
Lead Management System SQL Injection Vulnerability (CNVD-2023-05741)
Lead management system is a lead management system developed by Mayuri K. A SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of external input SQL statements in the id parameter of removeBrand.php, and can be exploited by attackers to The...
CVE-2022-47864
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php...