174 matches found
BIT-DISCOURSE-2022-21678 User's bio visible even if profile is restricted in Discourse
Discourse is an open source discussion platform. Prior to version 2.8.0.beta11 in the tests-passed branch, version 2.8.0.beta11 in the beta branch, and version 2.7.13 in the stable branch, the bios of users who made their profiles private were still visible in the tags on their users' pages. The...
WordPress plugin BestWebSoft s Like & Share security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
Code injection
The Simple Social Media Share Buttons WordPress plugin before 5.1.1 leaks password-protected post content to unauthenticated visitors in some meta tags...
CVE-2023-5845
The CVE-2023-5845 pertains to the WordPress plugin Simple Social Media Share Buttons (versions prior to 5.1.1). The underlying issue is leakage of password-protected post content to unauthenticated visitors via certain meta tags (notably og:description and twitter:description). Affected component...
CVE-2023-5845 Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access
The Simple Social Media Share Buttons WordPress plugin before 5.1.1 leaks password-protected post content to unauthenticated visitors in some meta tags...
PT-2023-32376 · WordPress · Simple Social Media Share Buttons
Name of the Vulnerable Software and Affected Versions: The Simple Social Media Share Buttons WordPress plugin versions prior to 5.1.1 Description: The issue allows password-protected post content to be leaked to unauthenticated visitors through some meta tags. Recommendations: For versions prior ...
WordPress plugin Simple Social Media Share Buttons security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure
Description The plugin does not prevent unauthorised users from accessing password-protected posts' content. As unauthenticated, view the source via the web browser of any password protected post and find The content of the post will be disclosed in the meta and script tags after this, example:...
CVE-2023-46618
Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...
CVE-2023-46618 WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...
CVE-2023-46618
CVE-2023-46618 is a CSRF vulnerability affecting WordPress Category SEO Meta Tags plugin versions
PT-2023-30115 · WordPress · Category Seo Meta Tags
Name of the Vulnerable Software and Affected Versions: Category SEO Meta Tags plugin versions = 2.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access
Description The plugin leaks password-protected post content to unauthenticated visitors in some meta tags PoC As unauthenticated, view the source of any password-protected post and see that the content of the post is disclosed in the og:description and twitter:description meta tags...
CVE-2023-46091
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...
CVE-2023-46091
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...
CVE-2023-46091 WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...
CVE-2023-46091 WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...
CVE-2023-46091
CVE-2023-46091 concerns the WordPress plugin Category SEO Meta Tags by Bala Krishna / Sergey Yakovlev. The initial document states an Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability affecting the plugin versions <= 2.5 . Publicly available connected details confirm the component...
PT-2023-29841 · WordPress · Category Seo Meta Tags
Name of the Vulnerable Software and Affected Versions: Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin versions prior to 2.6 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability...