1111 matches found
CVE-2024-38688
CVE-2024-38688 is rejected/withdrawn; this CVE ID does not represent an active vulnerability.
PT-2024-28132 · Zip Recipes · Recipe Maker For Your Food Blog
Name of the Vulnerable Software and Affected Versions: Igor Benić Recipe Maker For Your Food Blog from Zip Recipes versions n/a through 8.2.6 Description: The issue affects the Recipe Maker For Your Food Blog from Zip Recipes, allowing access to functionality not properly constrained by Access...
WordPress Cooked Plugin <= 1.7.15.4 - Authenticated (Contributor+) HTML Injection via Recipe Excerpt vulnerability
Authenticated Contributor+ HTML Injection via Recipe Excerpt vulnerability discovered by RE-ALTER in WordPress Plugin Cooked versions = 1.7.15.4...
CVE-2024-39310
The CVE-2024-39310 involves the Basil recipe theme for WordPress. Affected versions are
CVE-2024-39310 WordPress Basil Theme Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability
The Basil recipe theme for WordPress is vulnerable to Persistent Cross-Site Scripting XSS via the posttitle parameter in versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access...
CVE-2024-39310: Improper Neutralization of Input During Web Page Generation
The Basil recipe theme for WordPress is vulnerable to Persistent Cross-Site Scripting XSS via the posttitle parameter in versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access...
PT-2024-28436 · WordPress · Basil +1
Name of the Vulnerable Software and Affected Versions: The Basil recipe theme for WordPress versions up to, and including, 2.0.4 Description: The issue is related to Persistent Cross-Site Scripting XSS via the post title parameter due to insufficient input sanitization and output escaping. This...
WordPress plugin Basil recipe security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-0383
The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wprm-recipe-instructions and wprm-recipe-ingredients shortcodes in all versions up to, and including, 9.1.0 due to insufficient restrictions on the 'grouptag' attribute . This makes it possible...
WordPress plugin WP Recipe Maker security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...
CVE-2024-0383: Improper Neutralization of Input During Web Page Generation
The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wprm-recipe-instructions and wprm-recipe-ingredients shortcodes in all versions up to, and including, 9.1.0 due to insufficient restrictions on the 'grouptag' attribute . This makes it possible...
PT-2024-15517
Name of the Vulnerable Software and Affected Versions WP Recipe Maker plugin for WordPress versions up to, and including, 9.1.0 Description The issue is related to Stored Cross-Site Scripting via the plugin's shortcodes wprm-recipe-instructions and wprm-recipe-ingredients due to insufficient...
WordPress plugin Cooked Pro recipe security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-27466 · WordPress · Cooked Pro
Name of the Vulnerable Software and Affected Versions: The Cooked Pro recipe plugin for WordPress versions up to, and including, 1.7.15.4 Description: The issue is related to Persistent Cross-Site Scripting XSS via the recipe settingspost title parameter due to insufficient input sanitization and...
CVE-2024-37308: Improper Neutralization of Input During Web Page Generation
The Cooked Pro recipe plugin for WordPress is vulnerable to Persistent Cross-Site Scripting XSS via the recipesettingsposttitle parameter in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with...
GHSA-CV6C-7963-WXCG MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling a maliciously crafted Recipe to execute arbitrary code on an end user’s system when run...
CVE-2024-37060
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling a maliciously crafted Recipe to execute arbitrary code on an end user’s system when run...
CVE-2024-37060
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling a maliciously crafted Recipe to execute arbitrary code on an end user’s system when run...