WordPress plugin SALERT 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2023-32118 WordPress SALERT Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPoperation SALERT – Fake Sales Notification WooCommerce plugin = 1.2.1 versions...

CVE-2023-32118 WordPress SALERT Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPoperation SALERT – Fake Sales Notification WooCommerce plugin = 1.2.1 versions...

PT-2023-23626 · WordPress · Wpoperation Salert – Fake Sales Notification

Name of the Vulnerable Software and Affected Versions: WPoperation SALERT – Fake Sales Notification WooCommerce plugin versions prior to 1.2.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts...

WordPress SALERT Plugin <= 1.2.1 is vulnerable to Broken Access Control

Software SALERT Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32126 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9bf715c4269f Credits Jonas Höbenreich Required privilege...

WordPress SALERT Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software SALERT Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32118 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c132ae91ace9 Credits Jonas Höbenreich Required...

SALERT < 1.2.2 - Subscriber+ Missing Authorization

The plugin is vulnerable to unauthorized modification of data due to a missing capability check on the salertsavesettingswithajax function...