WordPress plugin Advanced Floating Content Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress WP-Lister Lite for eBay plugin <= 3.5.11 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin WP-Lister Lite for eBay versions = 3.5.11...

WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Total Poll Lite versions = 4.9.9...

WordPress WP Fusion Lite plugin <= 3.42.10 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Majed Refaea in WordPress Plugin WP Fusion Lite versions = 3.42.10...

WordPress Total Poll Lite Plugin <= 4.9.9 is vulnerable to Broken Access Control

Software Total Poll Lite Type Plugin Vulnerable versions = 4.9.9 Fixed in 4.10.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32821 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c0cd27d36a6e Credits thiennv Required privilege...

VulnCheck KEV: CVE-2024-32836

Unrestricted Upload of File with Dangerous Type vulnerability in WP Lab WP-Lister Lite for eBay.This issue affects WP-Lister Lite for eBay: from n/a through 3.5.11...

WordPress WP Fusion Lite Plugin <=3.42.10 is vulnerable to Sensitive Data Exposure

Software WP Fusion Lite Type Plugin Vulnerable versions =3.42.10 Fixed in 3.43.0 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-32796 Patch priority Low CVSS severity Low 4.3 Developer Very Good Plugins PSID 2a910a7e6c38 Credits Majed Refaea Required...

CVE-2024-32573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through = 3.5.11...

CVE-2024-32573

CVE-2024-32573 is a Stored XSS in the WP-Lister Lite for eBay WordPress plugin. Affected: WP-Lister Lite for eBay, from n/a through 3.5.11. Root cause: improper neutralization during web page generation. Impact: Low confidentiality/integrity/availability if exploited; exploit requires stored inpu...

CVE-2024-32573 WordPress WP-Lister Lite for eBay plugin <=3.5.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through = 3.5.11...

CVE-2024-32573 WordPress WP-Lister Lite for eBay plugin <= 3.5.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for eBay allows Stored XSS.This issue affects WP-Lister Lite for eBay: from n/a through 3.5.11...

WordPress Plugin WP-Lister Lite for eBay 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress WP-Lister Lite for eBay plugin <=3.5.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin WP-Lister Lite for eBay versions = 3.5.11...

WordPress Real Media Library plugin <= 4.22.11 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin Real Media Library Lite versions = 4.22.11...

Sarada Lite < 1.1.3 - Cross-Site Request Forgery to Notice Dismissal

Description The Sarada Lite theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the saradaliteupdateadminnotice function. This makes it possible for unauthenticated attackers to dismiss...

WordPress Real Media Library Lite Plugin <= 4.22.11 is vulnerable to Cross Site Scripting (XSS)

Software Real Media Library Lite Type Plugin Vulnerable versions = 4.22.11 Fixed in 4.22.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2328 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e373234a026c Credits stealthcopte...

WordPress WP-Lister Lite for eBay Plugin <=3.5.11 is vulnerable to Cross Site Scripting (XSS)

Software WP-Lister Lite for eBay Type Plugin Vulnerable versions =3.5.11 Fixed in 3.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32573 Patch priority Low CVSS severity Low 5.9 Developer WP Lab PSID 8166c822f801 Credits Joshua Chan Required privilege Shop...

CVE-2024-31429

Cross-Site Request Forgery CSRF vulnerability in Blossom Themes Sarada Lite.This issue affects Sarada Lite: from n/a through 1.1.2...

CVE-2024-31429

Cross-Site Request Forgery CSRF vulnerability in Blossom Themes Sarada Lite.This issue affects Sarada Lite: from n/a through 1.1.2...

CVE-2024-31429 WordPress Sarada Lite theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Blossom Themes Sarada Lite.This issue affects Sarada Lite: from n/a through 1.1.2...