CVE-2023-45073 WordPress Mendeley Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Michael Koch Mendeley Plugin plugin = 1.3.2 versions...

CVE-2023-45073

CVE-2023-45073 corresponds to a stored XSS in the WordPress Mendeley Plugin (admin+ access) affecting plugin versions &lt;= 1.3.2 (and reported in related entries as

CVE-2023-44475

Cross-Site Request Forgery CSRF vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin = 2.0.9 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin = 2.0.9 versions...

CVE-2023-44475

CVE-2023-44475 corresponds to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Add Shortcodes Actions And Filters, affecting versions 2.0.9, specifically 2.10 or later. If patching is not possible, monitor for vendor advisories and apply mitigations once available.

PT-2023-29254 · WordPress · Michael Simpson Add Shortcodes Actions/Filters

Name of the Vulnerable Software and Affected Versions: Michael Simpson Add Shortcodes Actions And Filters plugin versions = 2.0.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

CVE-2023-44473

Cross-Site Request Forgery CSRF vulnerability in Michael Tran Table of Contents Plus plugin = 2302 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Michael Tran Table of Contents Plus plugin = 2302 versions...

CVE-2023-44473

CVE-2023-44473 affects the WordPress Table of Contents Plus plugin (versions

michael-lichtblau.de Cross Site Scripting vulnerability OBB-3731962

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

michael-hardy.co.uk Cross Site Scripting vulnerability OBB-3654267

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Pre-Auth SQLi leading to RCE in Social Media Skeleton v1.0

Summary A SQL Injection vulnerability exists in Social Media Skeleton v1.0 via the username and password parameters in admin/login.php. Not to be confused with login.php, which properly escapes special characters. Issue Description SQL injection SQLi is a code injection technique used to attack...

CVE-2023-36501

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Michael Winkler teachPress plugin = 9.0.2 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Michael Winkler teachPress plugin = 9.0.2 versions...

CVE-2023-36501

The CVE-2023-36501 entry concerns the WordPress teachPress plugin (affected versions ≤ 9.0.2) and describes an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability via meta_field_id and cite_id. The issue is confirmed in multiple sources (Patchstack and CVE/NVD references) with a r...

businesscoachmichaeldill.com Cross Site Scripting vulnerability OBB-3329877

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

michaeljordansworld.com Cross Site Scripting vulnerability OBB-3309737

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-25452

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Michael Pretty prettyboymp CMS Press plugin = 0.2.3 versions...

CVE-2023-25452

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Michael Pretty prettyboymp CMS Press plugin = 0.2.3 versions...

CVE-2023-25452 WordPress CMS Press Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Michael Pretty prettyboymp CMS Press plugin = 0.2.3 versions...