CVE-2024-10164

CVE-2024-10164 corresponds to a stored XSS in the Premium Packages – Sell Digital Products Securely WordPress plugin (wpdmpp_pay_link shortcode). Affected versions: all up to and including 5.9.3. Condition: exploitation requires authenticated access at contributor level or above. Impact: injected...

WordPress Premium Packages Plugin <= 5.9.3 is vulnerable to Cross Site Scripting (XSS)

Software Premium Packages Type Plugin Vulnerable versions = 5.9.3 Fixed in 5.9.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11225 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 615d91201bee Credits Peter Thaleikis...

WordPress plugin Premium Packages 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Premium Packages - Sell Digital Products Securely plugin <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode vulnerability

WordPress Premium Packages - Sell Digital Products Securely plugin = 5.9.3 - Authenticated Contributor+ Stored Cross-Site Scripting via wpdmpppaylink Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin WPDM – Premium Packages versions = 5.9.3...

WordPress Premium Packages Plugin <= 5.9.3 is vulnerable to Cross Site Scripting (XSS)

Software Premium Packages Type Plugin Vulnerable versions = 5.9.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10164 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e294ff14d79a Credits Peter Thaleikis Required...

CVE-2022-47424

Cross-Site Request Forgery CSRF vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1...

CVE-2022-47424

Cross-Site Request Forgery CSRF vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1...

CVE-2022-47424

CVE-2022-47424 is a CSRF vulnerability in Repute InfoSystems ARMember (and ARMember Premium). Affected: ARMember up to version 4.0.5; ARMember Premium up to 6.7.0.x (before 6.7.1). Root cause is Cross-Site Request Forgery enabling unauthorized actions. Remediation: update ARMember to 4.0.6 or lat...

PT-2024-11755 · Repute Infosystems · Armember +1

Name of the Vulnerable Software and Affected Versions: Repute InfoSystems ARMember versions 4.0.5 and earlier Repute InfoSystems ARMember Premium versions prior to 6.7.1 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. This is a type of...

CVE-2024-52435

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in W3 Eden, Inc. Premium Packages allows SQL Injection.This issue affects Premium Packages: from n/a through 5.9.3...

CVE-2024-52435 WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in W3 Eden, Inc. Premium Packages allows SQL Injection.This issue affects Premium Packages: from n/a through 5.9.3...

CVE-2024-52435 WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages.This issue affects WPDM – Premium Packages: from n/a through = 6.0.5...

CVE-2024-52435

CVE-2024-52435 is an SQL Injection in the WordPress plugin WordPress Premium Packages (Premium Packages) by W3 Eden, Inc. , affecting versions from n/a up to 5.9.3. Root cause: improper neutralization of certain SQL elements in commands. Public data assigns a High impact with potential confidenti...

PT-2024-35275 · W3 Eden · W3 Eden

Name of the Vulnerable Software and Affected Versions: W3 Eden, Inc. Premium Packages versions n/a through 5.9.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

WordPress plugin Premium Packages SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Jorge Diaz - ddiax Patchstack Alliance in WordPress Plugin WPDM – Premium Packages versions = 6.0.5...

WordPress Premium Packages Plugin <= 5.9.5 is vulnerable to SQL Injection

Software Premium Packages Type Plugin Vulnerable versions = 5.9.5 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-52435 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID d5408dddb735 Credits Jorge Diaz ddiax Required privilege Administrator...

WordPress Pie Register Premium plugin < 3.8.3.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pie Register Premium versions 3.8.3.3...

WordPress Pie Register Premium Plugin < 3.8.3.3 is vulnerable to Broken Access Control

Software Pie Register Premium Type Plugin Vulnerable versions 3.8.3.3 Fixed in 3.8.3.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-52391 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4396b4ed7d8a Credits Ananda Dhakal Patchsta...

Wordfence Price Increases Coming December 5th, 2024

We haven't raised our prices in a relatively high inflation environment in 2 years, and in the case of Wordfence Care and Response, for 2.5 years. So that time has come, and we want to let our free and paid user community know ahead of time. We’re giving you almost a month forewarning before we...