Exploit for CVE-2024-10516

CVE-2024-10516 Swift Performance Lite = 2.3.7.1 - Unauthentic...

WordPress 3DPrint Lite plugin < 2.1 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin 3DPrint Lite versions 2.1...

CVE-2024-10480

The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-10480

The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-10480 3DPrint Lite < 2.1 - Settings Update via CSRF

The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-10480 3DPrint Lite < 2.1 - Settings Update via CSRF

The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-10480

CVE-2024-10480 affects the 3DPrint Lite WordPress plugin prior to 2.1. The issue is a missing CSRF check when updating plugin settings, enabling a logged-in attacker to change settings via CSRF. The Red Hat/NVD entries describe the same flaw and patch in version 2.1 or later. Impact is limited to...

WordPress plugin Swift Performance Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-16308 · WordPress · 3Dprint Lite

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite WordPress plugin versions prior to 2.1 Description: The issue is related to a lack of CSRF check when updating settings in the 3DPrint Lite WordPress plugin. This could allow attackers to make a logged-in admin change settings vi...

PT-2024-39773 · WordPress · Rstheme Ultimate Coming Soon & Maintenance

Name of the Vulnerable Software and Affected Versions: The Ultimate Coming Soon & Maintenance plugin for WordPress versions up to, and including, 1.0.9 Description: The issue allows unauthorized modification of data due to a missing capability check on the ucsm activate lite template lite functio...

The vulnerability of the V-Simulator 5 component of the monitoring software for Fuji Electric Tellus Lite V-Simulator allows a intruder to execute arbitrary code.

The vulnerability of the V-Simulator 5 component of the monitoring software for the Fuji Electric Tellus Lite V-Simulator relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially...

The vulnerability of the V-Simulator 5 component of the monitoring software for Fuji Electric Tellus Lite V-Simulator allows a intruder to execute arbitrary code.

The vulnerability of the V-Simulator 5 component of the monitoring software for the Fuji Electric Tellus Lite V-Simulator is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V8 files...

PT-2024-35939 · Elementor · The Plus Addons For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor Page Builder Lite versions through 5.6.14 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could...

The vulnerability of the V-Simulator 5 component of the monitoring software for Fuji Electric Tellus Lite V-Simulator allows a intruder to execute arbitrary code.

The vulnerability of the V-Simulator 5 component of the monitoring software for the Fuji Electric Tellus Lite V-Simulator is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V8 files...

The vulnerability of the V-Simulator 5 component of the monitoring software for Fuji Electric Tellus Lite V-Simulator allows a intruder to execute arbitrary code.

The vulnerability of the V-Simulator 5 component of the monitoring software for the Fuji Electric Tellus Lite V-Simulator relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially...

The vulnerability of the V-Simulator 5 component of the monitoring software for Fuji Electric Tellus Lite V-Simulator allows a intruder to execute arbitrary code.

The vulnerability of the V-Simulator 5 component of the monitoring software for the Fuji Electric Tellus Lite V-Simulator is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V8 files...

CVE-2024-11779

The WIP WooCarousel Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wipwoocarouselproductscarousel' shortcode in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-11779 WIP WooCarousel Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WIP WooCarousel Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wipwoocarouselproductscarousel' shortcode in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-11779

CVE-2024-11779 : The WIP WooCarousel Lite WordPress plugin is vulnerable to stored XSS via the shortcode wip_woocarousel_products_carousel in all versions up to 1.1.6. Authenticated attackers with contributor-level access can inject scripts that execute when users load the injected page. The CVE ...

WordPress plugin WIP WooCarousel Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...