20 matches found
EUVD-2015-2302
Malware in sbrugna...
EUVD-2024-34503
Malicious code in bioql PyPI...
CVE-2024-33922
Insertion of Sensitive Information into Log File vulnerability in Jordy Meow WP Media Cleaner.This issue affects WP Media Cleaner: from n/a through 6.7.2...
Media Cleaner: Clean your WordPress! < 6.7.3 - Unauthenticated Information Exposure
Description The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.7.2 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information...
CVE-2024-33922
Insertion of Sensitive Information into Log File vulnerability in Jordy Meow WP Media Cleaner.This issue affects WP Media Cleaner: from n/a through 6.7.2...
CVE-2024-33922 WordPress WP Media Cleaner plugin <= 6.7.2 - Sensitive Data Exposure via Log File vulnerability
Insertion of Sensitive Information into Log File vulnerability in Jordy Meow WP Media Cleaner.This issue affects WP Media Cleaner: from n/a through 6.7.2...
CVE-2024-33922
CVE-2024-33922 affects WP Media Cleaner (Jordy Meow) up to version 6.7.2, enabling unauthenticated Insertion/Inclusion of Sensitive Information into log files. Connected sources indicate a patch is available and the issue is mitigated by updating to a fixed version.
CVE-2024-33922 WordPress WP Media Cleaner plugin <= 6.7.2 - Sensitive Data Exposure via Log File vulnerability
Insertion of Sensitive Information into Log File vulnerability in Jordy Meow WP Media Cleaner.This issue affects WP Media Cleaner: from n/a through 6.7.2...
PT-2024-25555 · WordPress · Wp Media Cleaner
Name of the Vulnerable Software and Affected Versions: WP Media Cleaner versions through 6.7.2 Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. There is no information provided about the estimated number of...
WordPress plugin WP Media Cleaner 日志信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A log information...
WordPress WP Media Cleaner plugin <= 6.7.2 - Sensitive Data Exposure via Log File vulnerability
Sensitive Data Exposure via Log File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Media Cleaner versions = 6.7.2...
WordPress WP Media Cleaner Plugin <= 6.7.2 is vulnerable to Sensitive Data Exposure
Software WP Media Cleaner Type Plugin Vulnerable versions = 6.7.2 Fixed in 6.7.3 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2024-33922 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 489615881bfc Credits Joshua Chan Required...
Wordpress Media Cleaner Plugin - XSS Vulnerability
Exploit Title: Wordpress Media Cleaner - XSS Author: smail SAYGILI Web Site: www.ismailsaygili.com.tr E-Mail: [email protected] Date: 2015-02-26 Plugin Download: https://downloads.wordpress.org/plugin/wp-media-cleaner.2.2.6.zip Version: 2.2.6 Vulnerable Files: + wp-media-cleaner.php...
Multiple Cross-Site Scripting Vulnerabilities in WordPress Plugin WP Media Cleaner
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Multiple cross-site scripting vulnerabilities in the WordPress plugin WP Media Cleaner allow allow remote attackers to inject...
CVE-2015-2195
Multiple cross-site scripting XSS vulnerabilities in the WP Media Cleaner plugin 2.2.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 paged, or 3 s parameter in the wp-media-cleaner page to wp-admin/upload.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the WP Media Cleaner plugin 2.2.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 paged, or 3 s parameter in the wp-media-cleaner page to wp-admin/upload.php...
CVE-2015-2195
CVE-2015-2195 relates to the WordPress WP Media Cleaner plugin (version 2.2.6). The connected sources confirm multiple cross-site scripting (XSS) vulnerabilities in this plugin that allow remote attackers to inject arbitrary JavaScript/HTML via the view, paged, or s parameters on the wp-media-cle...
WordPress WP Media Cleaner Plugin <= 2.2.6 - Multiple XSS
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via the "s", "paged" or "view" parameters in the wp-media-cleaner page to wp-admin/upload.php. Solution Update the plugin...
Wordpress Media Cleaner plugin 'wp-media-cleaner.php' has multiple cross-site scripting vulnerabilities
WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation, which supports setting up personal blog sites on servers with PHP and MySQL.Media Cleaner is one of the plugins that helps to clean the uploaded directories and media libraries. Wordpres...
WordPress Media Cleaner 2.2.6 Cross Site Scripting
Exploit Title: Wordpress Media Cleaner - XSS Author: İsmail SAYGILI Web Site: www.ismailsaygili.com.tr E-Mail: [email protected] Date: 2015-02-26 Plugin Download: https://downloads.wordpress.org/plugin/wp-media-cleaner.2.2.6.zip Version: 2.2.6 Vulnerable Files: + wp-media-cleaner.php...