CVE-2024-30456

CVE-2024-30456 describes a Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WPCS (WordPress Currency Switcher Pro). The issue affects WPCS versions from unspecified earliest release up to 1.2.0.1. The CVE entry includes an CVSS vector with AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicat...

CVE-2024-30457 WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.3.1...

CVE-2024-30457

CVE-2024-30457 is described as a CSRF vulnerability in the MDTF (Meta Data and Taxonomies Filter) WordPress plugin. The vulnerability reportedly affects MDTF versions from a-n/a up to 1.3.3.1. The connected Red Hat entry reiterates the CSRF description for the same CVE, but there are no concrete ...

CVE-2024-30458

CVE-2024-30458 describes a Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOOCS – WooCommerce Currency Switcher. Public record indicates the issue affects WOOCS versions from unspecified initial release up to 1.4.1.7. The connected Red Hat advisory corroborates the CSRF nature and ...

PT-2024-23385 · Realmag777 · Wpcs

Name of the Vulnerable Software and Affected Versions: WPCS versions 1.2.0.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the realmag777 WPCS. This issue allows an attacker to perform unintended actions on a user's account. Recommendations: For versions 1.2.0.1 and...

CVE-2024-30200

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2...

CVE-2024-30200 WordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2...

CVE-2024-24835

Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4...

CVE-2024-24835

Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4...

CVE-2024-24835 WordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4...

CVE-2024-24835 WordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4...

CVE-2024-24835

CVE-2024-24835 affects BEAR (WordPress BEAR plugin) up to version 1.1.4, with a Missing Authorization vulnerability due to insufficient permission checks in several functions. The issue allows authenticated users with subscriber-level access or higher to perform unauthorized actions on BEAR. The ...

CVE-2023-50861

Cross-Site Request Forgery CSRF vulnerability in realmag777 HUSKY – Products Filter for WooCommerce formerly WOOF.This issue affects HUSKY – Products Filter for WooCommerce formerly WOOF: from n/a through 1.3.4.3...

CVE-2023-50861

Cross-Site Request Forgery CSRF vulnerability in realmag777 HUSKY – Products Filter for WooCommerce formerly WOOF.This issue affects HUSKY – Products Filter for WooCommerce formerly WOOF: from n/a through 1.3.4.3...

CVE-2023-50861

CVE-2023-50861 concerns the WordPress plugin HUSKY – Products Filter for WooCommerce (formerly WOOF). The vulnerability is a Cross-Site Request Forgery (CSRF) affecting the plugin versions from n/a up to and including 1.3.4.3 . The CVE entry cites a high impact with CVSS v3.1 vector: AV:N/AC:L/PR...

CVE-2023-50861 WordPress HUSKY plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in realmag777 HUSKY – Products Filter for WooCommerce formerly WOOF.This issue affects HUSKY – Products Filter for WooCommerce formerly WOOF: from n/a through 1.3.4.3...

CVE-2023-51480

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store allows Stored XSS.This issue affects Active Products Tables for WooCommerce. Professional...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store allows Stored XSS.This issue affects Active Products Tables for WooCommerce. Professional...

CVE-2023-51480

CVE-2023-51480 affects the WordPress plugin “Active Products Tables for WooCommerce” (Professional/Profit Products Tables). The vulnerability is a Cross‑Site Scripting (Stored XSS) due to improper neutralization of input during web page generation. It lists affected versions as

CVE-2024-24834

CVE-2024-24834 affects BEAR – Bulk Editor and Products Manager Professional for WooCommerce (Pluginus.Net) up to version 1.1.4. Root cause: improper input neutralization during web page generation, resulting in Stored XSS. Public data from Patchstack and CVE records indicate the vulnerability exi...