9 matches found
EUVD-2023-32202
Malicious code in bioql PyPI...
CVE-2023-28532
Missing Authorization vulnerability in wpdirectorykit.com Real Estate Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Directory: from n/a through 1.0.5...
CVE-2023-28532
Missing Authorization vulnerability in wpdirectorykit.com Real Estate Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Directory: from n/a through 1.0.5...
CVE-2023-28532 WordPress Real Estate Directory theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation
Missing Authorization vulnerability in wpdirectorykit.com Real Estate Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Directory: from n/a through 1.0.5...
CVE-2023-28532 WordPress Real Estate Directory theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation
Missing Authorization vulnerability in listingthemes Real Estate Directory real-estate-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Directory: from n/a through = 1.0.5...
CVE-2023-28532
CVE-2023-28532 relates to the WordPress Real Estate Directory Theme (= 1.0.6. If upgrading is not feasible, apply the vendor-supplied mitigation per Patchstack guidance.
WordPress plugin Real Estate Directory 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Real Estate Directory Theme <= 1.0.5 is vulnerable to Broken Authentication
Software Real Estate Directory Type Theme Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A2: Broken Authentication Classification Broken Authentication CVE CVE-2023-28532 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID d6b9b2cfbb79 Credits Dave Jong Patchsta...
Selio - Real Estate Directory <= 1.1 - SQL Injection & Persistent XSS
----- SQL Injection: ----- Vulnerable 'id' parameter is https://listing-themes.com/selio-wp/wp-admin/admin.php?page=ownlistingaddlisting=21 ----- Persistent XSS: ----- You need a new user account, then go to any property listing on the website and use 'ENQUIRY FORM' on the right sidebar. Or you...