105 matches found
CVE-2014-3961
SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an "output CSV" action to pdb-signup/...
CVE-2024-43141
Deserialization of Untrusted Data vulnerability in Roland Barker, xnau webdesign Participants Database allows Object Injection.This issue affects Participants Database: from n/a through 2.5.9.2...
CVE-2024-43141
Deserialization of Untrusted Data vulnerability in Roland Barker, xnau webdesign Participants Database allows Object Injection.This issue affects Participants Database: from n/a through 2.5.9.2...
CVE-2024-43141
Deserialization of Untrusted Data vulnerability in Roland Barker, xnau webdesign Participants Database allows Object Injection.This issue affects Participants Database: from n/a through 2.5.9.2...
CVE-2024-43141 WordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Roland Barker, xnau webdesign Participants Database allows Object Injection.This issue affects Participants Database: from n/a through 2.5.9.2...
CVE-2024-43141
CVE-2024-43141 affects the WordPress plugin Participants Database . The advisory describes a Deserialization of Untrusted Data vulnerability that allows Object Injection in versions up to 2.5.9.2 (patched in 2.5.9.2). CVSS metrics indicate a critical severity (3.1, base score 9.8) with network at...
CVE-2024-43141 WordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Roland Barker, xnau webdesign Participants Database allows Object Injection.This issue affects Participants Database: from n/a through 2.5.9.2...
WordPress plugin Participants Database 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...
WordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Participants Database versions = 2.5.9.2...
WordPress Participants Database Plugin <= 2.5.9.2 is vulnerable to PHP Object Injection
Software Participants Database Type Plugin Vulnerable versions = 2.5.9.2 Fixed in 2.5.9.3 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-43141 Patch priority Medium CVSS severity Medium 9.8 Developer Claim ownership PSID 859a2e5c56af Credits LVT-tholv2k Required...
CVE-2023-48751
Missing Authorization, Cross-Site Request Forgery CSRF vulnerability in Roland Barker, xnau webdesign Participants Database allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects Participants Database: from n/a through 2.5.5...
CVE-2023-48751
Missing Authorization, Cross-Site Request Forgery CSRF vulnerability in Roland Barker, xnau webdesign Participants Database allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects Participants Database: from n/a through 2.5.5...
Cross site request forgery (csrf)
Missing Authorization, Cross-Site Request Forgery CSRF vulnerability in Roland Barker, xnau webdesign Participants Database allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects Participants Database: from n/a through 2.5.5...
CVE-2023-48751 WordPress Participants Database Plugin <= 2.5.5 is vulnerable to Broken Access Control
Missing Authorization, Cross-Site Request Forgery CSRF vulnerability in Roland Barker, xnau webdesign Participants Database allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects Participants Database: from n/a through 2.5.5...
CVE-2023-48751
CVE-2023-48751 affects the WordPress plugin Participants Database (WordPress plugin). Affected versions are
CVE-2023-48751 WordPress Participants Database Plugin <= 2.5.5 is vulnerable to Broken Access Control
Missing Authorization, Cross-Site Request Forgery CSRF vulnerability in Roland Barker, xnau webdesign Participants Database allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects Participants Database: from n/a through 2.5.5...
WordPress Plugin Participants Database Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2023-30938 · Unknown · Participants Database
Name of the Vulnerable Software and Affected Versions: Participants Database versions n/a through 2.5.5 Description: The issue affects the Participants Database, allowing access to functionality not properly constrained by ACLs due to a Missing Authorization and Cross-Site Request Forgery CSRF...
WordPress Participants Database Plugin <= 2.5.5 is vulnerable to Broken Access Control
Software Participants Database Type Plugin Vulnerable versions = 2.5.5 Fixed in 2.5.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48751 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 4e4f72b6b27f Credits Yudistira Arya...