Lucene search
+L

112 matches found

Cvelist
Cvelist
added 2025/08/28 12:37 p.m.17 views

CVE-2025-53230 WordPress Page Manager for Elementor Plugin <= 2.0.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Manager for Elementor: from n/a through = 2.0.5...

7.6CVSS0.00253EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/28 12:00 a.m.8 views

PT-2025-35049

Name of the Vulnerable Software and Affected Versions: honzat Page Manager for Elementor versions through 2.0.5 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update honzat Page Manager for Elementor t...

7.6CVSS6.1AI score0.00253EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/08/28 12:00 a.m.6 views

WordPress plugin Page Manager for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.6CVSS6.4AI score0.00253EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/08/25 12:15 p.m.8 views

WordPress Page Manager for Elementor Plugin <= 2.0.5 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by theviper17 in WordPress Plugin Page Manager for Elementor versions = 2.0.5...

7.6CVSS6.6AI score0.00253EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 5:42 a.m.8 views

CVE-2023-0088

The Swifty Page Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on several AJAX actions handling page creation and deletion among other things. This makes it possible for...

8.8CVSS6.3AI score0.00552EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:50 a.m.5 views

CVE-2023-0087

The Swifty Page Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘spmpluginoptionspagetreemaxwidth’ parameter in versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

5.5CVSS3.5AI score0.00647EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:24 a.m.16 views

CVE-2024-1197

A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This issue affects some unknown processing of the file delete-testimonial.php of the component HTTP GET Request Handler. The manipulation of the argument testimony leads to sql...

9.8CVSS7.5AI score0.00594EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2024/10/16 12:00 a.m.8 views

CVE-2024-46838

...

5.5CVSS6AI score0.00234EPSS
SaveExploits0
OSV
OSV
added 2024/02/02 11:15 p.m.14 views

CVE-2024-1197

A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This issue affects some unknown processing of the file delete-testimonial.php of the component HTTP GET Request Handler. The manipulation of the argument testimony leads to sql...

9.8CVSS5.8AI score0.00594EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/02 11:15 p.m.20 views

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This issue affects some unknown processing of the file delete-testimonial.php of the component HTTP GET Request Handler. The manipulation of the argument testimony leads to sql...

7.5CVSS7.8AI score0.00594EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/02 10:31 p.m.12 views

CVE-2024-1197 SourceCodester Testimonial Page Manager HTTP GET Request delete-testimonial.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This issue affects some unknown processing of the file delete-testimonial.php of the component HTTP GET Request Handler. The manipulation of the argument testimony leads to sql...

7.5CVSS9.9AI score0.00594EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/02 10:31 p.m.34 views

CVE-2024-1197 SourceCodester Testimonial Page Manager HTTP GET Request delete-testimonial.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This issue affects some unknown processing of the file delete-testimonial.php of the component HTTP GET Request Handler. The manipulation of the argument testimony leads to sql...

7.5CVSS10AI score0.00594EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/02 10:31 p.m.47 views

CVE-2024-1197

The CVE-2024-1197 entry affects SourceCodester Testimonial Page Manager 1.0. A vulnerability exists in the delete-testimonial.php handler where the testimony argument is manipulated, leading to SQL injection. This can be exploited remotely via HTTP GET requests. Affected component/file: delete-te...

9.8CVSS9.7AI score0.00594EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/02/02 10:15 p.m.10 views

CVE-2024-1196

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

6.1CVSS4AI score0.00481EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/02 10:15 p.m.27 views

CVE-2024-1196

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

6.1CVSS4.9AI score0.00481EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/02 10:15 p.m.21 views

Cross site scripting

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

5CVSS6.7AI score0.00481EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/02 10:00 p.m.28 views

CVE-2024-1196 SourceCodester Testimonial Page Manager HTTP POST Request add-testimonial.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

5CVSS6.1AI score0.00481EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/02 10:00 p.m.42 views

CVE-2024-1196 SourceCodester Testimonial Page Manager HTTP POST Request add-testimonial.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

5CVSS6.3AI score0.00481EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/02 10:00 p.m.68 views

CVE-2024-1196

CVE-2024-1196 affects SourceCodester Testimonial Page Manager 1.0. The vulnerability is an XSS flaw in add-testimonial.php’s handling of the argument name/description/testimony. The issue can be triggered remotely via HTTP POST requests, potentially allowing arbitrary script execution in a user’s...

6.1CVSS6.1AI score0.00481EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/02/02 12:00 a.m.10 views

Testimonial Page Manager Security Vulnerability

Testimonial Page Manager is a versatile web application for rems individual developers designed to simplify the process of presenting customer feedback and testimonials. A security vulnerability exists in SourceCodester Testimonial Page Manager version 1.0, which stems from the parameter testimon...

9.8CVSS7.3AI score0.00594EPSS
SaveExploits0References3
Rows per page
Query Builder