9850 matches found
CVE-2018-20987
CVE-2018-20987 affects the Newsletters Lite WordPress plugin. The connected documents confirm a PHP object injection flaw in newsletters-lite before version 4.6.8.6, caused by an insecure deserialization condition in the plugin’s code path. This vulnerability can enable remote code execution or s...
CVE-2018-20987
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...
CVE-2018-20987
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...
PT-2019-10424
Name of the Vulnerable Software and Affected Versions newsletters-lite plugin versions prior to 4.6.8.6 Description The issue concerns PHP object injection in the newsletters-lite plugin for WordPress. Recommendations For versions prior to 4.6.8.6, update to version 4.6.8.6 or later to resolve th...
CVE-2018-20987: Deserialization of Untrusted Data
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...
WordPress wp-business-intelligence-lite plugin SQL injection vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-business-intelligence-lite is a plugin used to create responsive charts. A SQL injection vulnerability exists in the WordPress...
Sql injection
The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...
CVE-2015-9326
The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...
CVE-2015-9326
CVE-2015-9326 affects the WordPress plugin wp-business-intelligence-lite prior to version 1.6.3. The vulnerability is a SQL injection in the plugin that could allow an attacker to execute arbitrary SQL commands, with impact described as high (NVD CVSS2: 7.5, high; CVSS3: 9.8, critical). Affected ...
CVE-2015-9326: Improper Neutralization of Special Elements used in an SQL Command
The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...
PT-2019-7285
Name of the Vulnerable Software and Affected Versions wp-business-intelligence-lite plugin versions prior to 1.6.3 Description The issue is related to SQL injection. Recommendations For versions prior to 1.6.3, update to version 1.6.3 or later to resolve the issue...
PT-2019-4371
Name of the Vulnerable Software and Affected Versions Huawei Mate 20 versions earlier than 9.1.0.131C00E131R3P1 Huawei Mate 20 Pro versions earlier than 9.1.0.310C185E10R2P1 Huawei Mate 20 RS versions earlier than 9.1.0.135C786E133R3P1 Huawei Mate 20 X versions earlier than 9.1.0.135C00E133R2P1...
Huawei Honor10 Lite and Huawei Y9 Denial of Service Vulnerability (CNVD-2019-44785)
Huawei Honor10 Lite and Huawei Y9 are both a smartphone from Chinese company Huawei Huawei. A denial-of-service vulnerability exists in Huawei Honor10 Lite Harry-AL00C before 9.1.0.217 C00E215R3P1 and Huawei Y9 Jackman-L23 before 9.1.0.220 C45E3R1P1T8, which can be exploited to cause a dead loop...
WordPress ARPrice Lite plugin cross-site request forgery vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the core/views/arpriceimportexport.php file in version 2.2 of the WordPr...
CVE-2019-14679
core/views/arpriceimportexport.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arpliteimportexport CSRF...
CVE-2019-14679
core/views/arpriceimportexport.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arpliteimportexport CSRF...
Cross site request forgery (csrf)
core/views/arpriceimportexport.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arpliteimportexport CSRF...
CVE-2019-14679
CVE-2019-14679 concerns the ARPrice Lite WordPress plugin (version 2.2) where core/views/arprice_import_export.php is vulnerable to CSRF via wp-admin/admin.php?page=arplite_import_export. The issue could allow an authenticated user to trigger unintended actions on that page. CVSS details indicate...