Malicious code in pretty-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c13ccb71946d796fddfaa2f62631f277063b7f3230d5fd22d783585b8ed16391 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Pretty Grid – Social Feed Gallery Plugin Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Pretty Grid – Social Feed Gallery Plugin Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 26d1c071d144 Credits Rafie...

WordPress Pretty Opt In Lite – Content Locker for Lead Generation Plugin <= 1.3.13 is vulnerable to Cross Site Scripting (XSS)

Software Pretty Opt In Lite – Content Locker for Lead Generation Type Plugin Vulnerable versions = 1.3.13 Fixed in 1.3.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 550b1e29c12...

WordPress Pretty Simple Popup Builder Plugin < 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Pretty Simple Popup Builder Type Plugin Vulnerable versions 1.0.7 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2d2949eccdb3 Credits Rafie Muhammad...

MAL-2023-695 Malicious code in pretty-literal-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364c533f74b84a92914fb0654862ca1daf2f125812bd1fba9f8a8f112c773248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-25147

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the referer header in versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping in the tracklink function. This makes it possible for...

CVE-2019-25147

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the referer header in versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping in the tracklink function. This makes it possible for...

Cross site scripting

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the referer header in versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping in the tracklink function. This makes it possible for...

CVE-2019-25147 Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the referer header in versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping in the tracklink function. This makes it possible for...

CVE-2019-25147 Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link

The Pretty Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via various IP headers as well as the referer header in versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping in the tracklink function. This makes it possible for...

CVE-2019-25147

The CVE-2019-25147 issue concerns the Pretty Links WordPress plugin. Affected product: WordPress plugin Pretty Links, versions up to and including 2.1.9. Root cause: insufficient input sanitization and output escaping in the track_link function, enabling Stored Cross-Site Scripting via various IP...

WordPress Plugin Pretty Links 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2022-47149

Cross-Site Request Forgery CSRF vulnerability in Pretty Links plugin = 3.4.0 versions...

CVE-2022-47149

Cross-Site Request Forgery CSRF vulnerability in Pretty Links plugin = 3.4.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Pretty Links plugin = 1.4 versions...

CVE-2022-47149

CVE-2022-47149: Cross-Site Request Forgery affecting WordPress Pretty Links plugin versions

CVE-2022-47149 WordPress Shortlinks by Pretty Links Plugin <= 3.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Pretty Links plugin = 3.4.0 versions...

CVE-2022-47149 WordPress Shortlinks by Pretty Links Plugin <= 3.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Pretty Links plugin = 3.4.0 versions...

WordPress plugin Pretty Links 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2023-15195 · WordPress · Pretty Links

Name of the Vulnerable Software and Affected Versions: Pretty Links plugin versions prior to 3.4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...