Lucene search
+L

10693 matches found

OSV
OSV
added 2024/06/09 9:15 a.m.7 views

CVE-2023-52230

Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.3...

6.5CVSS5.8AI score0.00353EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/09 9:08 a.m.25 views

CVE-2023-52230 WordPress Booster Plus for WooCommerce plugin < 7.1.3 - Authenticated Arbitrary WordPress Option Disclosure Vulnerability

Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.3...

6.5CVSS7AI score0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/09 9:06 a.m.40 views

CVE-2023-52232 WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability

Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2...

6.5CVSS0.00339EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/09 12:00 a.m.13 views

WordPress plugin Booster Plus for WooCommerce security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin...

6.5CVSS6.7AI score0.00339EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/09 12:00 a.m.14 views

PT-2024-14496 · Pluggabl Llc · Booster Plus For Woocommerce

Name of the Vulnerable Software and Affected Versions: Booster Plus for WooCommerce versions prior to 7.1.2 Description: The issue is related to a Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce. Recommendations: For versions prior to 7.1.2, update to version 7.1....

6.5CVSS7.1AI score0.00339EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/06/09 12:00 a.m.11 views

WordPress plugin Booster Plus for WooCommerce security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin...

6.5CVSS6.7AI score0.00353EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/09 12:00 a.m.7 views

PT-2024-25341 · Unknown · Posimyth The Plus Blocks For Block Editor

Name of the Vulnerable Software and Affected Versions: POSIMYTH The Plus Blocks for Block Editor | Gutenberg versions 3.2.5 and earlier Description: A Missing Authorization issue affects the software, potentially allowing unauthorized access. The issue is of medium severity. Recommendations: For...

8.8CVSS6.7AI score0.0043EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/06/09 12:00 a.m.9 views

WordPress plugin The Plus Blocks for Block Editor | Gutenberg Security Vulnerability

WordPress and the WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS6.7AI score0.0043EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/09 12:00 a.m.11 views

PT-2024-14494 · Pluggabl Llc · Booster Plus For Woocommerce

Name of the Vulnerable Software and Affected Versions: Booster Plus for WooCommerce versions prior to 7.1.3 Description: The issue is related to a Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce. Recommendations: For versions prior to 7.1.3, update to version 7.1....

6.5CVSS7.1AI score0.00353EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/08 2:15 p.m.8 views

CVE-2024-35709

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.5.4...

5.4CVSS5.8AI score0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/08 12:00 a.m.10 views

WordPress plugin The Plus Addons for Elementor Page Builder Lite Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin The Plus...

6.5CVSS5.9AI score0.00262EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/08 12:00 a.m.14 views

PT-2024-26658 · Unknown · The Plus Addons For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor Page Builder Lite versions through 5.5.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...

6.5CVSS6.6AI score0.00262EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2024/06/07 2:17 a.m.11 views

WordPress Photo Gallery by 10Web plugin <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Zipped SVG vulnerability discovered by Tobias Weißhaar kun19 in WordPress Plugin Photo Gallery by 10Web versions = 1.8.23...

6.4CVSS5.8AI score0.00314EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/06/06 11:14 a.m.11 views

WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin The Plus Addons for Elementor Page Builder Lite versions = 5.5.4...

6.5CVSS5.8AI score0.00262EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/06/06 9:54 a.m.8 views

WordPress Widget Options Extended plugin <= 5.1.0 - Subscriber+ User Meta Data Exposure Vulnerability

Subscriber+ User Meta Data Exposure Vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Widget Options - Extended versions = 5.1.0...

6.5CVSS6.9AI score0.00422EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/06/06 9:52 a.m.11 views

WordPress Widget Options plugin <= 4.0.1 - Subscriber+ Private/Draft Post Exposure Vulnerability

Subscriber+ Private/Draft Post Exposure Vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Widget Options versions = 4.0.1...

6.9AI score0.00294EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/06/06 9:51 a.m.12 views

WordPress Widget Options plugin <= 4.0.1 - Subscriber+ User Meta Data Exposure Vulnerability

Subscriber+ User Meta Data Exposure Vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Widget Options versions = 4.0.1...

6.9AI score0.00294EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/06/06 2:38 a.m.7 views

WordPress Album and Image Gallery plus Lightbox plugin <= 2.0 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by stealthcopter in WordPress Plugin Album and Image Gallery plus Lightbox versions = 2.0...

7.3CVSS7.1AI score0.00478EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/06/06 2:02 a.m.49 views

CVE-2024-4194

Affected software. The Album and Image Gallery plus Lightbox (WordPress plugin) is vulnerable up to version 2.0. The issue is due to improper validation of a value before do_shortcode, enabling unauthenticated attackers to execute arbitrary shortcodes. This CVE is corroborated by multiple sources...

7.3CVSS7.1AI score0.00478EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2024/06/05 12:00 a.m.5 views

Chanjet Smooth T+system SQL Injection Vulnerability

Chanjet Smooth T+system is an enterprise management software from China's Changjitong Chanjet, which is mainly for small and medium-sized enterprises, providing comprehensive solutions for finance, business, production and supply chain management. The system is designed to help enterprises realiz...

9.8CVSS7.7AI score0.00506EPSS
SaveExploits0References5
Rows per page
Query Builder