WordPress plugin Persian Nested Show/Hide Text 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-34958 · Unknown · Aboutorab Pourhaghani Persian Nested Show/Hide Text

Name of the Vulnerable Software and Affected Versions: Aboutorab Pourhaghani Persian Nested Show/Hide Text versions 1.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that a...

WordPress Persian Nested Show/Hide Text plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Persian Nested Show/Hide Text versions = 1.5...

WordPress Persian Nested Show/Hide Text Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)

Software Persian Nested Show/Hide Text Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51831 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 841990db88af Credits SOPROBRO Required privilege...

CVE-2024-43219

Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Persian WooCommerce: from n/a through 7.1.6...

CVE-2024-43219

Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Persian WooCommerce: from n/a through 7.1.6...

CVE-2024-43219

CVE-2024-43219 describes a Missing Authorization vulnerability in the Persian WooCommerce plugin for WordPress (Persian WooCommerce) affecting versions up to 7.1.6. The issue allows accessing functionality not properly constrained by ACLs, enabling privilege escalation-like access within the Pers...

CVE-2024-43219 WordPress Persian WooCommerce plugin <= 7.1.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Persian WooCommerce: from n/a through 7.1.6...

CVE-2024-43219 WordPress Persian WooCommerce plugin <= 7.1.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Persian WooCommerce: from n/a through 7.1.6...

PT-2024-30382 · Woocommerce · Persian Woocommerce Sms

Name of the Vulnerable Software and Affected Versions: Persian WooCommerce versions 7.1.6 and earlier Description: The issue affects Persian WooCommerce due to a Missing Authorization vulnerability. This vulnerability allows accessing functionality not properly constrained by ACLs. Recommendation...

WordPress plugin Persian WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-9213

The افزونه پیامک ووکامرس Persian WooCommerce SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 7.0.2. This makes it possible for unauthenticated attackers to injec...

CVE-2024-9213 Persian WooCommerce SMS <= 7.0.2 - Reflected Cross-Site Scripting

The افزونه پیامک ووکامرس Persian WooCommerce SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 7.0.2. This makes it possible for unauthenticated attackers to injec...

CVE-2024-9213 Persian WooCommerce SMS <= 7.0.2 - Reflected Cross-Site Scripting

The افزونه پیامک ووکامرس Persian WooCommerce SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 7.0.2. This makes it possible for unauthenticated attackers to injec...

CVE-2024-9213

CVE-2024-9213 affects the Persian WooCommerce SMS plugin for WordPress. The vulnerability is a Reflected Cross-Site Scripting (XSS) due to using remove_query_arg without proper escaping in the URL, impacting all versions up to 7.0.2. Unauthenticated attackers can trigger script injection if a use...

PT-2024-39494 · WordPress · Persian Woocommerce Sms

Name of the Vulnerable Software and Affected Versions: Persian WooCommerce SMS plugin for WordPress versions up to, and including, 7.0.2 Description: The issue arises from the use of remove query arg without proper escaping on the URL, leading to a Reflected Cross-Site Scripting vulnerability. Th...

WordPress plugin Persian WooCommerce SMS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Persian WooCommerce SMS plugin <= 7.0.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Persian Woocommerce SMS versions = 7.0.2...

WordPress Persian Woocommerce SMS Plugin <= 7.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Persian Woocommerce SMS Type Plugin Vulnerable versions = 7.0.2 Fixed in 7.0.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9213 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9b46c5c8953e Credits vgo0...

WordPress Persian WooCommerce plugin <= 7.1.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Persian WooCommerce versions = 7.1.6...