WordPress ExIm Lite Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software ExIm Lite Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4614127c3514 Credits Rafie Muhammad Patchstack Required...

WordPress Ultimate Divi Modules Suite – Divi Sumo Lite Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Divi Modules Suite – Divi Sumo Lite Type Plugin Vulnerable versions = 1.0.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5acd9c422d26 Credits Rafie...

WordPress Broadcast Lite Theme < 2.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Broadcast Lite Type Theme Vulnerable versions 2.0.8 Fixed in 2.0.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8dc3411567dd Credits Rafie Muhammad Patchstack Required...

WordPress Pretty Opt In Lite – Content Locker for Lead Generation Plugin <= 1.3.13 is vulnerable to Cross Site Scripting (XSS)

Software Pretty Opt In Lite – Content Locker for Lead Generation Type Plugin Vulnerable versions = 1.3.13 Fixed in 1.3.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 550b1e29c12...

WordPress Divi Carousel Lite - Image Carousel, Logo Carousel, Testimonial Carousel Slider and more Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)

Software Divi Carousel Lite - Image Carousel, Logo Carousel, Testimonial Carousel Slider and more Type Plugin Vulnerable versions = 1.6.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Cla...

WordPress Aquarella Lite Theme <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Aquarella Lite Type Theme Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b3af0c04aaa1 Credits Rafie Muhammad Patchstack Required...

WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)

Software Elegant Calendar Lite – WordPress Events Calendar Plugin Type Plugin Vulnerable versions = 1.6.7 Fixed in 1.6.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 615ca7b21043...

WordPress Topcat Lite Theme <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Topcat Lite Type Theme Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c481a9476e2e Credits Rafie Muhammad Patchstack Required...

WordPress Unite Gallery Lite Plugin < 1.7.61 is vulnerable to Cross Site Scripting (XSS)

Software Unite Gallery Lite Type Plugin Vulnerable versions 1.7.61 Fixed in 1.7.61 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a8cd76e55c3 Credits Rafie Muhammad Patchstack...

CVE-2021-4419

The CVE-2021-4419 entry describes a Cross-Site Request Forgery in the WordPress plugin WP-Backgrounds Lite (versions up to 2.3). The vulnerability arises from missing or incorrect nonce validation in the ino_save_data() function, enabling unauthenticated attackers to save metadata via forged requ...

CVE-2021-4414 Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass

The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.5. This is due to missing or incorrect nonce validation on the wcalpreviewemails function. This makes it possible for unauthenticated attackers to generat...

CVE-2021-4414 Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass

The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.5. This is due to missing or incorrect nonce validation on the wcalpreviewemails function. This makes it possible for unauthenticated attackers to generat...

CVE-2021-4414

The CVE concerns the WordPress plugin Abandoned Cart Lite for WooCommerce . It is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to and including 5.8.5, caused by missing/incorrect nonce validation in the function wcal_preview_emails() . This allows unauthenticated attackers to ge...

WordPress Plugin Abandoned Cart Lite for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Plugin WP-Backgrounds Lite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2023-12526 · WordPress · Abandoned Cart Lite For Woocommerce

Name of the Vulnerable Software and Affected Versions: Abandoned Cart Lite for WooCommerce plugin for WordPress versions up to and including 5.8.5 Description: The issue arises from missing or incorrect nonce validation on the wcal preview emails function, allowing unauthenticated attackers to...

CVE-2023-23993

Cross-Site Request Forgery CSRF vulnerability in LionScripts.Com LionScripts: IP Blocker Lite plugin = 11.1.1 versions...

CVE-2023-23993

Cross-Site Request Forgery CSRF vulnerability in LionScripts.Com LionScripts: IP Blocker Lite plugin = 11.1.1 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in LionScripts.Com LionScripts: IP Blocker Lite plugin = 11.1.1 versions...

CVE-2023-23993

CVE-2023-23993 is a CSRF vulnerability in LionScripts: IP Blocker Lite plugin for WordPress, affecting versions &lt;= 11.1.1. The vulnerability allows unauthenticated attackers to perform unintended actions on behalf of an authenticated user; patch status in provided sources is not clearly fixed ...