8078 matches found
PT-2019-7729
Name of the Vulnerable Software and Affected Versions wp-polls plugin versions prior to 2.73.1 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the Poll bar option, allowing potential attackers to inject malicious scripts into the website. Recommendations For...
CVE-2016-10936: Improper Neutralization of Input During Web Page Generation
The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...
PT-2019-14322
Name of the Vulnerable Software and Affected Versions stops-core-theme-and-plugin-updates plugin versions prior to 8.0.5 Description The issue is related to insufficient restrictions on option changes, such as disabling unattended theme updates, due to a nonce check error. Recommendations For...
PT-2019-3099
Name of the Vulnerable Software and Affected Versions OpenBSD kernel versions prior to 6.5 Description The issue exists due to insufficient input validation in the tcp sack option function of the OpenBSD kernel. This can be exploited by a remote attacker to cause a denial of service. An attacker...
CVE-2019-15319
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce...
CVE-2019-15319
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce...
CVE-2019-15320
The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled...
CVE-2019-15321
The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled...
CVE-2019-15321
The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled...
CVE-2019-15320
The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled...
Code injection
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce...
Design/Logic Flaw
The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled...
CVE-2019-15321
CVE-2019-15321 applies to the WordPress plugin “Option Tree” prior to version 2.7.3, where an Object Injection vulnerability arises from mishandled serialized classes. The entry is documented across multiple sources (NVD description: “option-tree plugin before 2.7.3 for WordPress has Object Injec...
CVE-2019-15321
The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled...
CVE-2019-15320
CVE-2019-15320 concerns the WordPress plugin OptionTree prior to version 2.7.3. The vulnerability is an Object Injection flaw caused by mishandling the + character, as documented by multiple sources (NVD, Red Hat, WPVulndb, etc.). Impact is described as affecting confidentiality, integrity, and a...
CVE-2019-15320
The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled...
CVE-2019-15319
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce...
CVE-2019-15319
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce...
PT-2019-14050
Name of the Vulnerable Software and Affected Versions option-tree plugin versions prior to 2.7.3 Description The issue is related to Object Injection due to the mishandling of serialized classes. Recommendations For versions prior to 2.7.3, update to version 2.7.3 or later to resolve the issue...