WordPress plugin PageLayer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Page Builder: Pagelayer – Drag and Drop website builder plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin PageLayer versions = 1.8.7...

WordPress PageLayer Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)

Software PageLayer Type Plugin Vulnerable versions = 1.8.7 Fixed in 1.8.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43972 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e5ff899f830a Credits Sharanabasappa Required privilege...

CVE-2024-30465

Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through 1.8.1...

CVE-2024-30465

Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through 1.8.1...

CVE-2024-30465

CVE-2024-30465 concerns the WordPress PageLayer PageLayer plugin (Pagelayer Team PageLayer). Public docs describe a Missing Authorization vulnerability in Pagelayer Team PageLayer, affecting PageLayer versions from n/a up to 1.8.1. The root cause is missing authorization checks, enabling unauthor...

CVE-2024-30465 WordPress PageLayer plugin <= 1.8.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through 1.8.1...

CVE-2024-30465 WordPress PageLayer plugin <= 1.8.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through 1.8.1...

WordPress plugin PageLayer security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability...

PT-2024-23394 · Pagelayer · Pagelayer

Name of the Vulnerable Software and Affected Versions: PageLayer versions 1.8.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Pagelayer Team PageLayer. This vulnerability may allow unauthorized access. Recommendations: For versions 1.8.1 and earlier,...

CVE-2024-31383

Cross-Site Request Forgery CSRF vulnerability in Pagelayer PopularFX.This issue affects PopularFX: from n/a through 1.2.4...

CVE-2024-31383

Technical details about CVE-2024-31383 (PS: PopularFX CSRF) are not provided in the supplied connected documents. Monitor official advisories for exact root cause, affected versions, and fixes.

CVE-2024-31383 WordPress PopularFX theme <= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Pagelayer PopularFX.This issue affects PopularFX: from n/a through 1.2.4...

CVE-2024-31383 WordPress PopularFX theme <= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Pagelayer PopularFX.This issue affects PopularFX: from n/a through 1.2.4...

PT-2024-24030 · Unknown · Pagelayer Popularfx

Name of the Vulnerable Software and Affected Versions: Pagelayer PopularFX versions 1.2.4 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Pagelayer PopularFX. This issue allows an attacker to perform unintended actions on a user's account. Recommendations: For versions...

CVE-2024-2504

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'attr' parameter in all versions up to, and including, 1.8.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-2504

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'attr' parameter in all versions up to, and including, 1.8.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

WordPress Plugin Page Builder: Pagelayer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Page Builder: A security...

PageLayer < 1.8.2 - Missing Authorization

Description The PageLayer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the pagelayertrashpost function in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers, with contributor-level access and above, to...

WordPress PageLayer Plugin <= 1.8.1 is vulnerable to Broken Access Control

Software PageLayer Type Plugin Vulnerable versions = 1.8.1 Fixed in 1.8.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30465 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bc48f4fa9379 Credits Rafie Muhammad Patchstack Required...