CVE-2024-39634 WordPress PowerPack Pro for Elementor plugin <= 2.10.14 - Contributor+ Privilege Escalation vulnerability

Improper Privilege Management vulnerability in IdeaBox PowerPack Pro for Elementor allows Privilege Escalation.This issue affects PowerPack Pro for Elementor: from n/a through 2.10.14...

CVE-2024-39634

CVE-2024-39634 describes an improper privilege management vulnerability in the WordPress plugin PowerPack Pro for Elementor (IdeaBox PowerPack Pro for Elementor) affecting versions up to and including 2.10.14. The issue enables privilege escalation for users with Contributor+ privileges. The vuln...

WordPress Custom 404 Pro plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Custom 404 Pro versions = 3.11.1...

WordPress Element Pack Pro plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL vulnerability

AuthenticatedContributor+ Stored Cross-Site Scripting via Wrapper Link URL vulnerability discovered by Francesco Carlucci in WordPress Plugin Element Pack Pro versions = 7.9.0...

VulnCheck KEV: CVE-2024-39646

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kunal Custom 404 Pro custom-404-pro.This issue affects Custom 404 Pro: from n/a through = 3.11.1...

WordPress Element Pack Pro Plugin <= 7.9.0 is vulnerable to Cross Site Scripting (XSS)

Software Element Pack Pro Type Plugin Vulnerable versions = 7.9.0 Fixed in 7.9.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2455 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 730dc288d987 Credits Francesco Carlucci...

WordPress plugin PowerPack Pro for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Custom 404 Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-28583 · Unknown · Custom 404 Pro

Name of the Vulnerable Software and Affected Versions: Custom 404 Pro versions 3.11.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: For...

WordPress Custom 404 Pro Plugin <= 3.11.1 is vulnerable to Cross Site Scripting (XSS)

Software Custom 404 Pro Type Plugin Vulnerable versions = 3.11.1 Fixed in 3.11.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-39646 Patch priority Medium CVSS severity Medium 7.1 Developer Kunal Nagar PSID 69ef67e4f21c Credits Dimas Maulana Required privilege...

PT-2024-28570 · Elementor · Powerpack Pro For Elementor

Name of the Vulnerable Software and Affected Versions: PowerPack Pro for Elementor versions 2.10.14 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation. Recommendations: For PowerPack Pro for Elementor versions 2.10.14 and earlier,...

SolarWinds Kiwi Syslog Server 9.6.7.1 Unquoted Service Path

Exploit Title: SolarWinds Kiwi Syslog Server 9.6.7.1 - Unquoted Service Path Date: 2024-07-31 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Vendor Homepage:...

CVE-2024-7324 IObit iTop Data Recovery Pro BPL madbasic_.bpl uncontrolled search path

A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required ...

CVE-2024-7324

The CVE concerns IObit iTop Data Recovery Pro 4.4.0.687, specifically the BPL Handler’s madbasic_.bpl library. The vulnerability is an uncontrolled search path due to a flaw in that library, requiring local access to trigger. Multiple sources confirm the affected component and root cause; exploit...

IObit iTop Data Recovery Pro 代码问题漏洞

IObit iTop Data Recovery Pro is a data recovery software from IObit. A code issue vulnerability exists in IObit iTop Data Recovery Pro version 4.4.0.687, which stems from an unknown operation in the madbasic.bpl library that can result in an uncontrolled search path...

PT-2024-5613 · Iobit · Iobit Itop Data Recovery Pro

Name of the Vulnerable Software and Affected Versions: IObit iTop Data Recovery Pro version 4.4.0.687 Description: The issue is related to an uncontrolled search path element in the BPL Handler component of the IObit iTop Data Recovery Pro. This can be exploited to execute arbitrary commands. Loc...

WordPress Paid Memberships Pro - Member Directory Add On plugin < 1.2.6 - Contributor+ Sensitive Information Disclosure and SQLi vulnerability

WordPress Paid Memberships Pro - Member Directory Add On plugin 1.2.6 - Contributor+ Sensitive Information Disclosure and SQLi vulnerability discovered by Scott Kingsley Clark in WordPress Plugin Paid Memberships Pro - Member Directory Add On versions 1.2.6...

WordPress Paid Memberships Pro - Membership Maps Add On plugin < 0.7 - Contributor+ Sensitive Information Disclosure vulnerability

WordPress Paid Memberships Pro - Membership Maps Add On plugin 0.7 - Contributor+ Sensitive Information Disclosure vulnerability discovered by Scott Kingsley Clark in WordPress Plugin Pmpro Membership Maps versions 0.7...

CVE-2024-1287 Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi

The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking other users' sensitive information, including password hashes via an SQLi vector...

CVE-2024-1287 Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi

The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking other users' sensitive information, including password hashes via an SQLi vector...