Lucene search
+L

3092 matches found

CNNVD
CNNVD
•added 2024/06/20 12:00 a.m.•17 views

WordPress plugin Responsive video embed security vulnerability

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Custom Field Suite plugin is a custom field adding plugin used in it.Media Library...

5.4CVSS6.7AI score0.00367EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/18 12:00 a.m.•3 views

CVE-2024-4375: Improper Neutralization of Input During Web Page Generation

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mslayer' shortcode in all versions up to, and including, 3.9.10 due to insufficient input sanitization and output escaping on the 'cssid' user supplied attribute. This...

6.4CVSS5.9AI score0.00322EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/17 6:15 p.m.•20 views

CVE-2024-6058

A vulnerability classified as problematic has been found in LabVantage LIMS 2017. This affects an unknown part of the file /labvantage/rc?command=page&page=SampleHistoricalList&iframename=list&crc=crc1701669816260. The manipulation of the argument height/width leads to cross site scripting. It is...

6.1CVSS3.8AI score0.00418EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/14 12:00 a.m.•7 views

CVE-2023-6492: Cross-Site Request Forgery (CSRF)

The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.13. This is due to missing or incorrect nonce validation in the 'adminnotices' hook found in class-settings.php. This makes it possible...

4.3CVSS5.5AI score0.00196EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2024/06/12 12:00 a.m.•25 views

Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery < 1.4.6 - Missing Authorization

Description The Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaximagegallery and igsavesettings functions in versions up to, and including, 1.4.5. This...

8.8CVSS6.4AI score0.00356EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2024/06/11 12:00 a.m.•24 views

Responsive < 5.0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Responsive theme for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to 5.0.3.1 exclusive due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level...

6.5CVSS5.8AI score0.00261EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
•added 2024/06/10 3:41 p.m.•104 views

Exploit for Uncontrolled Search Path Element in Cisco Secure_Client

CVE-2024-20338 advisoryhttps://sec.cloudapps.cisco.com/sec...

7.3CVSS7.3AI score0.00888EPSS
SaveExploits1
osv_cve
osv_cve
•added 2024/06/10 8:15 a.m.•20 views

CVE-2024-35722

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/10 8:15 a.m.•53 views

CVE-2024-35721

Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5...

8.8CVSS0.00356EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/10 8:15 a.m.•19 views

CVE-2024-35721

Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/10 7:57 a.m.•50 views

CVE-2024-35721 WordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5...

4.3CVSS0.00356EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/10 7:56 a.m.•33 views

CVE-2024-35722 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

4.3CVSS6.9AI score0.00356EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/10 12:00 a.m.•5 views

PT-2024-26673

Name of the Vulnerable Software and Affected Versions A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow versions 1.4.0 and earlier Description The issue is related to a Missing Authorization vulnerability in the A WP Life Slider Responsive Slideshow plugin. This vulnerabilit...

8.8CVSS0.00356EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•5 views

CVE-2024-35721: Missing Authorization

Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/10 12:00 a.m.•19 views

WordPress plugin Slider Responsive Slideshow Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

8.8CVSS6.7AI score0.00356EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•9 views

CVE-2024-35722: Missing Authorization

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/09 12:15 p.m.•18 views

CVE-2024-31252

Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/09 12:15 p.m.•59 views

CVE-2024-31252

Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6...

8.8CVSS0.00356EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/09 11:12 a.m.•24 views

CVE-2024-31252 WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6...

4.3CVSS4.7AI score0.00356EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/09 11:12 a.m.•136 views

CVE-2024-31252

CVE-2024-31252: Missing Authorization vulnerability in dFactory Responsive Lightbox (WordPress Responsive Lightbox) affecting versions up to 2.4.6. The issue is a Broken Access Control/Missing Authorization flaw allowing unauthorized access. Red Hat and other sources confirm the same description....

8.8CVSS5AI score0.00356EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder