WordPress Plugin Arscode Ninja Popups Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

Ninja Popups <= 4.7.5 - Unauthenticated Open Redirect

Description The plugin does not properly validate a redirect url, allowing unauthenticated attackers to redirect users to potentially malicious sites by clicking a link...

CVE-2022-27861: URL Redirection to Untrusted Site

Unauth. Open Redirect vulnerability in Arscode Ninja Popups plugin = 4.7.5 versions...

PT-2023-12918

Name of the Vulnerable Software and Affected Versions Arscode Ninja Popups plugin versions 4.7.5 and earlier Description The issue is an Unauth. Open Redirect vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about...

WordPress Popups Plugin <= 1.7.3 is vulnerable to Cross Site Scripting (XSS)

Software Popups Type Plugin Vulnerable versions = 1.7.3 Fixed in 1.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 23e3c6e9af0f Credits Rafie Muhammad Patchstack Required privilege...

CVE-2023-32965

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CRUDLab Jazz Popups plugin = 1.8.7 versions...

CVE-2023-32965

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CRUDLab Jazz Popups plugin = 1.8.7 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CRUDLab Jazz Popups plugin = 1.8.7 versions...

CVE-2023-32965 WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CRUDLab Jazz Popups plugin = 1.8.7 versions...

CVE-2023-32965

CVE-2023-32965 affects WordPress Jazz Popups plugin

WordPress Plugin Jazz Popups 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Ninja Popups Plugin <= 4.7.7 is vulnerable to Open Redirection

Software Ninja Popups Type Plugin Vulnerable versions = 4.7.7 Fixed in 4.7.8 OWASP Top 10 A1: Injection Classification Open Redirection CVE CVE-2022-27861 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 5f5341c2db31 Credits Dave Jong Patchstack Required privilege...

CVE-2023-32965: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in CRUDLab Jazz Popups plugin = 1.8.7 versions...

CVE-2021-4421

The Advanced Popups plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the metaboxpopupsave function. This makes it possible for unauthenticated attackers to save meta tags via a forged...

Cross site request forgery (csrf)

The Advanced Popups plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the metaboxpopupsave function. This makes it possible for unauthenticated attackers to save meta tags via a forged...

CVE-2021-4421 Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypass

The Advanced Popups plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the metaboxpopupsave function. This makes it possible for unauthenticated attackers to save meta tags via a forged...

CVE-2021-4421 Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypass

The Advanced Popups plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the metaboxpopupsave function. This makes it possible for unauthenticated attackers to save meta tags via a forged...

WordPress Plugin Advanced Popups 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2023-12535 · WordPress · Advanced Popups

Name of the Vulnerable Software and Affected Versions: Advanced Popups plugin for WordPress versions up to, and including, 1.1.1 Description: The issue is due to missing or incorrect nonce validation on the metabox popup save function, making it possible for unauthenticated attackers to save meta...

CVE-2021-4421: Cross-Site Request Forgery (CSRF)

The Advanced Popups plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the metaboxpopupsave function. This makes it possible for unauthenticated attackers to save meta tags via a forged...