318 matches found
CVE-2024-30490
CVE-2024-30490 affects the WordPress ProfileGrid plugin (versions through 5.7.8). The root cause is SQL Injection from insufficient escaping of the user-supplied ‘search’ parameter, leading to arbitrary SQL execution. Public descriptions from connected sources confirm the plugin versions affected...
PT-2024-23441 · Metagauss · Metagauss Profilegrid
Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.2 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid. Recommendations: For versions through 5.7.2, update to a version lat...
CVE-2024-30491: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...
CVE-2024-30490: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...
PT-2024-23417 · Metagauss · Metagauss Profilegrid
Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...
PT-2024-23416
Name of the Vulnerable Software and Affected Versions Metagauss ProfileGrid versions through 5.7.8 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...
CVE-2024-30513: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.2...
CVE-2024-30241
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1...
CVE-2024-30241
CVE-2024-30241 is an SQL Injection in ProfileGrid (WordPress plugin) affecting ProfileGrid versions through 5.7.1. Exploitation requires at least Contributor+ access (authenticated). A fix is available in 5.7.2 (and later); update to a patched release to mitigate. Other connected sources corrobor...
CVE-2024-30241 WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.1 - Contributor+ SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1...
CVE-2024-30241 WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.1 - Contributor+ SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1...
CVE-2024-30241: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1...
CVE-2024-29776
Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...
CVE-2024-29776
Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...
CVE-2024-29776 WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...
CVE-2024-29776 WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...
CVE-2024-29776
Technical details for CVE-2024-29776 (Metagauss EventPrime XSS) are not provided in the supplied documents. No vendor/affected version specifics, root cause, impact, or remediation are disclosed here; monitor official advisories for updates.
PT-2024-23018 · Metagauss · Metagauss Eventprime
Name of the Vulnerable Software and Affected Versions: Metagauss EventPrime versions 3.3.9 and earlier Description: The issue is a Cross Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...
CVE-2024-29776: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9...