3078 matches found
CVE-2016-10930: Improper Input Validation
The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number...
CVE-2014-10389: Improper Authentication
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication...
PT-2019-7066
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns directory traversal in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update to...
PT-2019-14060
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system versions prior to 9.1.2 Description The issue allows for HTML injection. Recommendations For versions prior to 9.1.2, update to version 9.1.2 or later to resolve the issue...
PT-2019-7064
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns full path disclosure in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update t...
PT-2019-7065
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns incorrect authentication in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, upda...
PT-2019-7067
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.1 Description The issue concerns JavaScript injection in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.1, update t...
PT-2019-7063
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue is related to SQL injection in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update to...
CVE-2019-15331: Improper Neutralization of Input During Web Page Generation
The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection...
PT-2019-7726
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 7.1.0 Description The issue is related to an insecure direct object reference via a ticket number. Recommendations For versions prior to 7.1.0, update to version 7.1.0 or later ...
CVE-2014-10388: Exposure of Sensitive Information to an Unauthorized Actor
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...
CVE-2014-10390: Improper Limitation of a Pathname to a Restricted Directory
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal...
CVE-2017-18513
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface...
Cross site request forgery (csrf)
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface...
CVE-2017-18513
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface...
CVE-2017-18513
Affected software: WordPress, plugin “responsive-menu” prior to 3.1.4. Root cause: missing CSRF protection in the admin interface. Vulnerability description: CVE-2017-18513 documents a CSRF risk for admin actions in the responsive-menu plugin. Multiple connected sources (Red Hat, CNVD, NVD, PRION...
PT-2019-8447
Name of the Vulnerable Software and Affected Versions WordPress responsive-menu plugin versions prior to 3.1.4 Description The issue concerns the lack of a CSRF protection mechanism for the admin interface in the responsive-menu plugin. Recommendations For versions prior to 3.1.4, update the...
CVE-2017-18513: Cross-Site Request Forgery (CSRF)
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface...
Photospace Responsive < 1.1.8 - Authenticated XSS
The Photospace Responsive Gallery WordPress plugin was affected by an Authenticated XSS security vulnerability...
[SECURITY] Fedora 29 Update: js-jquery-jstree-3.3.8-1.fc29
jsTree is jquery plugin, that provides interactive trees. It is absolutely free, open source and distributed under the MIT license. jsTree is easily extendable, themable and configurable, it supports HTML & JSON data sources, AJAX & async callback loading. jsTree functions properly in either...