Lucene search
+L

3119 matches found

CVE
CVE
added 2024/03/27 7:23 a.m.93 views

CVE-2024-29924

Technical details about CVE-2024-29924 (affected product, root cause, versions, exploits, and fixes) are not provided in the supplied documents. Monitor for updates.

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/27 7:23 a.m.27 views

CVE-2024-29924 WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in W3 Eden, Inc. Premium Packages allows Reflected XSS.This issue affects Premium Packages: from n/a through 5.8.2...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/27 7:23 a.m.37 views

CVE-2024-29924 WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in W3 Eden, Inc. Premium Packages allows Reflected XSS.This issue affects Premium Packages: from n/a through 5.8.2...

7.1CVSS7.1AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.13 views

PT-2024-23147 · W3 Eden · W3 Eden

Name of the Vulnerable Software and Affected Versions: W3 Eden, Inc. Premium Packages versions n/a through 5.8.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

7.1CVSS9.3AI score0.00354EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.8 views

WordPress Plugin Premium Packages 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

7.1CVSS7AI score0.00354EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/25 11:21 a.m.33 views

CVE-2022-45352 WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1...

5.4CVSS5.8AI score0.00405EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/25 11:19 a.m.24 views

CVE-2022-45351 WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1...

5.4CVSS7AI score0.00465EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/25 11:18 a.m.16 views

CVE-2022-45349 WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1...

4.3CVSS7AI score0.00405EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/25 11:18 a.m.30 views

CVE-2022-45349 WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1...

4.3CVSS5AI score0.00405EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/03/25 12:00 a.m.15 views

WordPress Premium Packages Plugin <= 5.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Premium Packages Type Plugin Vulnerable versions = 5.8.2 Fixed in 5.8.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29924 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fd83d5609f73 Credits Yudistira Arya Required privile...

7.1CVSS6.5AI score0.00354EPSS
SaveExploits0References1Affected Software1
Wordfence Blog
Wordfence Blog
added 2024/03/21 3:55 p.m.95 views

Wordfence Intelligence Weekly WordPress Vulnerability Report (March 11, 2024 to March 17, 2024)

Did you know were running a Bug Bounty Extravaganza again? Earn over 6x our usual bounty rates, up to $10,000, for all vulnerabilities submitted through May 27th, 2024 when you opt to have Wordfence handle responsible disclosure! Last week, there were 163 vulnerabilities disclosed in 126 WordPres...

7.5CVSS10AI score0.93971EPSS
SaveExploits37
Positive Technologies
Positive Technologies
added 2024/03/21 12:00 a.m.14 views

PT-2024-11685 · Yith · Yith Woocommerce Gift Cards Premium

Name of the Vulnerable Software and Affected Versions: YITH WooCommerce Gift Cards Premium versions 3.23.1 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects YITH WooCommerce Gift Cards Premium, allowing unauthorized access...

6.5CVSS9.2AI score0.00473EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2024/03/20 12:55 p.m.7 views

premium-speakers.com Cross Site Scripting vulnerability OBB-3881150

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
added 2024/03/19 4:15 p.m.24 views

CVE-2024-29106

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/19 4:15 p.m.10 views

CVE-2024-29106

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

5.4CVSS5.8AI score0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/19 3:37 p.m.15 views

CVE-2024-29106 WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

6.5CVSS6.8AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/19 3:37 p.m.30 views

CVE-2024-29106 WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

6.5CVSS6.7AI score0.00316EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/19 3:37 p.m.68 views

CVE-2024-29106

CVE-2024-29106 affects LeapWorx’s Leap13 Premium Addons for Elementor (WordPress Premium Addons for Elementor) up to version 4.10.16. The issue is an Improper Neutralization of Input During Web Page Generation, i.e., Stored XSS. Root cause: insufficient input sanitization in the affected plugin’s...

6.5CVSS5.2AI score0.00316EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/03/19 12:00 a.m.7 views

WordPress Plugin Premium Addons for Elementor Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS5.8AI score0.00316EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/19 12:00 a.m.8 views

PT-2024-22726 · Unknown · Leap13 Premium Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Leap13 Premium Addons for Elementor versions 4.10.16 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an...

6.5CVSS7AI score0.00316EPSS
SaveExploits0References5
Rows per page
Query Builder