CVE-2024-43229 WordPress WP Search Analytics plugin <= 1.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Analytics: from n/a through = 1.4.9...

WordPress plugin WP Search Analytics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-30392 · Unknown · Wp Search Analytics

Name of the Vulnerable Software and Affected Versions: WP Search Analytics versions 1.4.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WP Search Analytics...

CVE-2024-9209

The WP Search Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-9209

The WP Search Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-9209 WP Search Analytics <= 1.4.10 - Reflected Cross-Site Scripting

The WP Search Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-9209

The CVE CVE-2024-9209 applies to the WordPress plugin WP Search Analytics. It is a reflected XSS vulnerability triggered by insufficient escaping of add_query_arg in the plugin’s URL handling, affecting all versions up to and including 1.4.10. Impact is unauthenticated abuse where an attacker can...

WordPress WP Search Analytics plugin <= 1.4.10 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin WP Search Analytics versions = 1.4.10...

WordPress WP Search Analytics Plugin <= 1.4.10 is vulnerable to Cross Site Scripting (XSS)

Software WP Search Analytics Type Plugin Vulnerable versions = 1.4.10 Fixed in 1.4.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9209 Patch priority Medium CVSS severity Medium 7.1 Developer Cornel Raiu PSID 95b75262f4d2 Credits vgo0 Required...

WordPress plugin WP Search Analytics 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress WP Search Analytics plugin <= 1.4.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin WP Search Analytics versions = 1.4.9...

WordPress WP Search Analytics Plugin <= 1.4.9 is vulnerable to Broken Access Control

Software WP Search Analytics Type Plugin Vulnerable versions = 1.4.9 Fixed in 1.4.10 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43229 Patch priority Low CVSS severity Low 4.3 Developer Cornel Raiu PSID 7e9848f9ce80 Credits Abdi Pranata Required...

CVE-2023-30471

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cornel Raiu WP Search Analytics plugin = 1.4.7 versions...

CVE-2023-30471

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cornel Raiu WP Search Analytics plugin = 1.4.7 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cornel Raiu WP Search Analytics plugin = 1.4.7 versions...

CVE-2023-30471

CVE-2023-30471 is a reflected XSS vulnerability in the WordPress plugin WP Search Analytics (Cornel Raiu)

WordPress plugin WP Search Analytics cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress WP Search Analytics Plugin <= 1.4.7 is vulnerable to Cross Site Scripting (XSS)

Software WP Search Analytics Type Plugin Vulnerable versions = 1.4.7 Fixed in 1.4.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30471 Patch priority Medium CVSS severity Medium 7.1 Developer Cornel Raiu PSID 0393f18cf90d Credits LEE SE HYOUNG...

CVE-2022-47587

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Cornel Raiu WP Search Analytics plugin = 1.4.5 versions...

CVE-2022-47587

CVE-2022-47587 affects the WordPress plugin WP Search Analytics (Cornel Raiu) up to version 1.4.5. The vulnerability is a stored XSS that arises due to insufficient input sanitization/escaping in admin-accessible contexts. Exploitation requires administrator privileges. Multiple sources corrobora...