159 matches found
CVE-2023-50826
CVE-2023-50826 : Stored XSS in the WordPress plugin Menu Image, Icons made easy (affected through 3.10). The vulnerability is described as an input handling issue during web page generation (XSS) and is currently listed as Unpatched per the connected documents; patch/update availability is not pr...
WordPress plugin Menu Image, Icons made easy Cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Menu Image, Icons made eas...
WordPress Menu Image, Icons made easy Plugin <= 3.10 is vulnerable to Cross Site Scripting (XSS)
Software Menu Image, Icons made easy Type Plugin Vulnerable versions = 3.10 Fixed in 3.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50826 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e7ae4a05a16b Credits emad Required privilege...
Donations Made Easy – Smart Donations <= 4.0.12 - Cross-Site Request Forgery
Description The Donations Made Easy – Smart Donations plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.12. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to...
CVE-2023-47551
Cross-Site Request Forgery CSRF vulnerability in RedNao Donations Made Easy – Smart Donations.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12...
CVE-2023-47551
Cross-Site Request Forgery CSRF vulnerability in RedNao Donations Made Easy – Smart Donations.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12...
WordPress Plugin Donations Made Easy - Smart Donations Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Donations Made Easy - Smart Donations h...
CVE-2023-47550
CVE-2023-47550 is a CSRF vulnerability that also enables Stored XSS in the WordPress plugin Donations Made Easy – Smart Donations , affecting versions 4.0.12 and earlier. The vulnerability can permit attackers to trick users into performing actions and store executable scripts. Public reports ind...
CVE-2023-47550 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
Cross-Site Request Forgery CSRF vulnerability in RedNao Donations Made Easy – Smart Donations allows Stored XSS.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12...
PT-2023-30501 · Unknown · Donations Made Easy – Smart Donations
Name of the Vulnerable Software and Affected Versions: Donations Made Easy – Smart Donations versions 4.0.12 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker could potentially trick a user into...
WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
Software Donations Made Easy – Smart Donations Type Plugin Vulnerable versions = 4.0.12 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47550 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 695b0be65e05 Credits...
WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Request Forgery (CSRF)
Software Donations Made Easy – Smart Donations Type Plugin Vulnerable versions = 4.0.12 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47551 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b70e50fa19bd Credit...
CVE-2023-40207
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RedNao Donations Made Easy – Smart Donations allows SQL Injection.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12...
CVE-2023-40207
CVE-2023-40207 concerns the WordPress plugin Donations Made Easy – Smart Donations. A SQL Injection exists due to improper neutralization of input and affects versions 4.0.12 and earlier. The issue is exploitable with Administrator privileges to run arbitrary SQL queries; remediation is to upgrad...
PT-2023-27325 · Unknown · Rednao Donations Made Easy – Smart Donations
Name of the Vulnerable Software and Affected Versions: RedNao Donations Made Easy – Smart Donations versions 4.0.12 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...
CISA Announces Launch of Logging Made Easy
Today, CISA announces the launch of a new version of Logging Made Easy LMElink is external, a straightforward log management solution for Windows-based devices that can be downloaded and self-installed for free. CISA’s version reimagines technology developed by the United Kingdom’s National Cyber...
The vulnerability of the Events Made Easy plugin of the WordPress content management system allows attackers to execute arbitrary SQL queries.
The vulnerability of the Events Made Easy plugin of the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
WordPress Events Made Easy Plugin <= 2.3.14 SQLi Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e-dynamics:eventsmadeeasy"; if description...