10688 matches found
WordPress Attesa Extra plugin <= 1.4.2 - Authenticated (Contributor+) Post Disclosure vulnerability
Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Attesa Extra versions = 1.4.2...
WordPress Product Input Fields for WooCommerce plugin <= 1.9 - Authenticated (Contributor+) Arbitrary File Read vulnerability
Authenticated Contributor+ Arbitrary File Read vulnerability discovered by 1337Wannabe in WordPress Plugin Product Input Fields for WooCommerce versions = 1.9...
WordPress WPForms plugin < 1.9.1.6 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by WPscan in WordPress Plugin Contact Form by WPForms versions 1.9.1.6...
Astra Linux – Vulnerability in LibreOffice
LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow occurred when importing an EMF+ gradient brush. The number of gradient blend points was read from the file and used to compute an allocation size; however, this multiplication could lead to a buffer...
WordPress Google Plus Share and +1 Button Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Google Plus Share and +1 Button Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53723 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 1172091fa78a Credits SOPROBR...
WordPress Ditty plugin < 3.1.47 - Author+ Stored XSS vulnerability
Author+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ditty versions 3.1.47...
WordPress System Dashboard plugin < 2.8.15 - Admin+ Path Traversal vulnerability
Admin+ Path Traversal vulnerability discovered by Dogus DEMIRKIRAN in WordPress Plugin System Dashboard versions 2.8.15...
WordPress SEO Plugin by Squirrly SEO plugin < 12.3.21 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin SEO Plugin by Squirrly SEO versions 12.3.21...
WordPress plugin The Plus Addons for Elementor 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...
ManageEngine ADAudit Plus < Build 8123 SQLi (CVE-2024-49574)
The version of ManageEngine ADAudit Plus installed on the remote host is prior to build 8123. It is, therefore, affected by a SQL injection vulnerability in the reports module.. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version...
WordPress The Plus Addons for Elementor plugin <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates vulnerability
Authenticated Contributor+ Sensitive Information Exposure via Elementor Templates vulnerability discovered by Ankit Patel in WordPress Plugin The Plus Addons for Elementor Page Builder Lite versions = 6.0.3...
CVE-2024-51916
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Brahma Multifox Plus multifox-plus allows DOM-Based XSS.This issue affects Multifox Plus: from n/a through = 1.1.6...
CVE-2024-51916
CVE-2024-51916 affects the WordPress plugin Multifox Plus (versions
CVE-2024-51916 WordPress Multifox Plus plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Brahma Multifox Plus multifox-plus allows DOM-Based XSS.This issue affects Multifox Plus: from n/a through = 1.1.6...
CVE-2024-51916 WordPress Multifox Plus plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Brahma Multifox Plus multifox-plus allows DOM-Based XSS.This issue affects Multifox Plus: from n/a through = 1.1.6...
WordPress plugin Multifox Plus 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...
WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.0.3 is vulnerable to Sensitive Data Exposure
Software The Plus Addons for Elementor Page Builder Lite Type Plugin Vulnerable versions = 6.0.3 Fixed in 6.0.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-10365 Patch priority Low CVSS severity Low 4.3 Developer POSIMYTH Innovations PSID...
CVE-2024-49574
Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module...