SourceCodester Kortex Lite Advocate Office Management System 代码注入漏洞

SourceCodester Kortex Lite Advocate Office Management System is an office management system from SourceCodester, Inc. A code injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which originates from a parameter id and is susceptible to...

WordPress plugin Ajax Search Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-16371 · WordPress · Ajax Search Lite

Name of the Vulnerable Software and Affected Versions: Ajax Search Lite WordPress plugin versions prior to 4.12.4 Description: The issue concerns the Ajax Search Lite WordPress plugin, where versions prior to 4.12.4 do not properly sanitize and escape some of its settings. This could allow...

WordPress vBSSO-lite plugin <= 1.4.3 - Account Takeover vulnerability

Account Takeover vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin vBSSO-lite versions = 1.4.3...

WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin LDD Directory Lite versions = 3.3...

CVE-2023-27449

Missing Authorization vulnerability in TotalSuite Total Poll Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total Poll Lite: from n/a through 4.8.6...

CVE-2023-27449 WordPress Total Poll Lite plugin <= 4.8.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in TotalSuite Total Poll Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total Poll Lite: from n/a through 4.8.6...

CVE-2023-27449

CVE-2023-27449: WordPress Total Poll Lite plugin &lt;= 4.8.6 suffers a Missing Authorization (Broken Access Control) vulnerability. The issue allows exploitation due to incorrectly configured access control with a required privilege of Subscriber. A fix is available in version 4.8.7; upgrading mi...

PT-2024-12131 · Unknown · Total Poll Lite

Name of the Vulnerable Software and Affected Versions: Total Poll Lite versions through 4.8.6 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 4.8.6,...

WordPress plugin Total Poll Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Swift Performance Lite plugin <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify' vulnerability

Unauthenticated Local PHP File Inclusion via 'ajaxify' vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Swift Performance Lite versions = 2.3.7.1...

CVE-2024-53823

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows DOM-Based XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.6.14...

CVE-2024-10516

The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...

CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'

The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...

CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'

The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...

CVE-2024-53825 WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 6.3.2...

WordPress Gaga Lite theme <= 1.4.2 - Authenticated Arbitrary Plugin Activation/Deactivation to RCE vulnerability

Authenticated Arbitrary Plugin Activation/Deactivation to RCE vulnerability discovered by Mika Patchstack Alliance in WordPress Theme Gaga Lite versions = 1.4.2...

Exploit for CVE-2024-10516

CVE-2024-10516 Swift Performance Lite = 2.3.7.1 - Unauthentic...

WordPress 3DPrint Lite plugin < 2.1 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin 3DPrint Lite versions 2.1...

CVE-2024-10480

The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...