568 matches found
CVE-2024-9428
The Popup Builder WordPress plugin before 4.3.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-9428
The Popup Builder WordPress plugin before 4.3.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-9428 Popup Builder < 4.3.5 - Admin+ Stored XSS
The Popup Builder WordPress plugin before 4.3.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-9428 Popup Builder < 4.3.5 - Admin+ Stored XSS
The Popup Builder WordPress plugin before 4.3.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-9428
CVE-2024-9428 affects the Popup Builder WordPress plugin prior to version 4.3.5. The issue arises because the plugin does not sanitise and escape certain settings, enabling stored cross-site scripting by high-privilege users (e.g., admins), including scenarios where unfiltered_html is disallowed ...
WordPress plugin Popup Builder 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-39626 · WordPress · Popup Builder
Name of the Vulnerable Software and Affected Versions: Popup Builder WordPress plugin versions prior to 4.3.5 Description: The issue concerns the Popup Builder WordPress plugin, where versions prior to 4.3.5 do not properly sanitize and escape some of its settings. This could allow high-privilege...
Exploit for CVE-2024-52382
CVE-2024-52382 Matix Popup Builder = 1.0.0 - Unauthenticat...
CVE-2024-52382
Missing Authorization vulnerability in medmatech Matix Popup Builder medma-matix allows Privilege Escalation.This issue affects Matix Popup Builder: from n/a through = 1.0.0...
CVE-2024-52382 WordPress Matix Popup Builder plugin <= 1.0.0 - Arbitrary Option Update to Privilege Escalation vulnerability
Missing Authorization vulnerability in medmatech Matix Popup Builder medma-matix allows Privilege Escalation.This issue affects Matix Popup Builder: from n/a through = 1.0.0...
EUVD-2024-45877
Missing Authorization vulnerability in Medma Technologies Matix Popup Builder allows Privilege Escalation.This issue affects Matix Popup Builder: from n/a through 1.0.0...
CVE-2024-52382 WordPress Matix Popup Builder plugin <= 1.0.0 - Arbitrary Option Update to Privilege Escalation vulnerability
Missing Authorization vulnerability in medmatech Matix Popup Builder medma-matix allows Privilege Escalation.This issue affects Matix Popup Builder: from n/a through = 1.0.0...
CVE-2024-52382
CVE-2024-52382 — Normal mode Affected software: Medma Technologies Matix Popup Builder (WordPress plugin) ≤ 1.0.0.Vulnerability: Missing Authorization leading to Privilege Escalation via unauthorized modification of plugin options.Root cause: Lack of capability check on a function across all vers...
PT-2024-35220 · Medma Technologies · Matix Popup Builder
Name of the Vulnerable Software and Affected Versions: Matix Popup Builder versions 1.0.0 and earlier Description: A Missing Authorization issue in Medma Technologies Matix Popup Builder allows Privilege Escalation. This can lead to unauthorized access and elevation of privileges. Recommendations...
WordPress plugin Matix Popup Builder 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
WordPress Matix Popup Builder plugin <= 1.0.0 - Arbitrary Option Update to Privilege Escalation vulnerability
Arbitrary Option Update to Privilege Escalation vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Matix Popup Builder versions = 1.0.0...
WordPress Matix Popup Builder Plugin <= 1.0.0 is vulnerable to Privilege Escalation
Software Matix Popup Builder Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-52382 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 5c4697e5f82c Credits João...
CVE-2024-9061
The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wpajaxnoprivshortcodeApiAdd AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an action tha...
CVE-2024-9061
The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wpajaxnoprivshortcodeApiAdd AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an action tha...