7902 matches found
CVE-2024-5925 Theron Lite <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
The Theron Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.3 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin PowerPack Lite for Beaver Builder versions = 1.3.0.3...
WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin PowerPack Lite for Beaver Builder versions = 1.3.0.4...
WordPress Scylla lite theme <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Button Shortcode vulnerability discovered by Francesco Carlucci in WordPress Theme Scylla lite versions = 1.8.3...
WordPress Theron Lite theme <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Button Shortcode vulnerability discovered by Francesco Carlucci in WordPress Theme Theron Lite versions = 2.0...
WordPress PowerPack Lite for Beaver Builder Plugin <= 1.3.0.4 is vulnerable to Cross Site Scripting (XSS)
Software PowerPack Lite for Beaver Builder Type Plugin Vulnerable versions = 1.3.0.4 Fixed in 1.3.0.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37409 Patch priority Low CVSS severity Low 5.9 Developer IdeaBox Creations PSID eff57a3a8675 Credits João Pedro S...
WordPress PowerPack Lite for Beaver Builder Plugin <= 1.3.0.3 is vulnerable to Local File Inclusion
Software PowerPack Lite for Beaver Builder Type Plugin Vulnerable versions = 1.3.0.3 Fixed in 1.3.0.4 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-37410 Patch priority Low CVSS severity Low 4.9 Developer IdeaBox Creations PSID 6c1f186fa5b1 Credits João...
WordPress Theron Lite Theme <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Software Theron Lite Type Theme Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5925 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b5cd651aaada Credits Francesco Carlucci Required...
The vulnerability of the Net::CIDR::Lite interpreter for the Perl programming language arises from errors in handling extra null characters at the beginning of an IP address string. This allows a malicious actor to bypass access controls.
The vulnerability of the Net::CIDR::Lite interpreter for the Perl programming language is related to errors in handling extra zero characters at the beginning of an IP address. Exploiting this vulnerability can allow a remote attacker to bypass access controls...
WordPress Scylla lite Theme <= 1.8.3 is vulnerable to Cross Site Scripting (XSS)
Software Scylla lite Type Theme Vulnerable versions = 1.8.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5922 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0bf32deea49e Credits Francesco Carlucci Required...
WordPress WP-Lister Lite for Amazon plugin <= 2.6.16 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin WP-Lister Lite for Amazon versions = 2.6.16...
WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Permalink Manager Lite versions = 2.4.3.3...
WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability
Unauthenticated Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin ElementsKit Elementor addons Lite versions = 3.1.4...
VulnCheck KEV: CVE-2024-37261
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon.This issue affects WP-Lister Lite for Amazon: from n/a through = 2.6.16...
WordPress Permalink Manager Lite Plugin <= 2.4.3.3 is vulnerable to Cross Site Scripting (XSS)
Software Permalink Manager Lite Type Plugin Vulnerable versions = 2.4.3.3 Fixed in 2.4.3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37257 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e3ec5eb6c45f Credits Rafie Muhammad...
WordPress WP-Lister Lite for Amazon Plugin <= 2.6.16 is vulnerable to Cross Site Scripting (XSS)
Software WP-Lister Lite for Amazon Type Plugin Vulnerable versions = 2.6.16 Fixed in 2.6.17 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37261 Patch priority Medium CVSS severity Medium 7.1 Developer WP Lab PSID 6ad653dd30ed Credits Le Ngoc Anh Required privileg...
Malicious code in active-record_lite (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3052 Malicious code in staff-lite (npm)
--- -= Per source details. Do not edit below this line.=-...