208 matches found
CVE-2023-5099 HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
The HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7 via the 'src' attribute of the 'csvsearch' shortcode. This allows authenticated attackers, with contributor-level permissions and above, to include and execute...
CVE-2023-45755
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in BuddyBoss BuddyPress Global Search plugin = 1.2.1 versions...
WordPress Sunny Search plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2023-32595
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin = 1.0.2 versions...
CVE-2023-32595 WordPress Sunny Search Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin = 1.0.2 versions...
CVE-2023-32595
CVE-2023-32595 concerns the Sunny Search plugin for WordPress (Palasthotel) versions up to 1.0.2. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw that requires admin+ authentication to exploit; successful exploitation could inject arbitrary script within the WordPress site. Affected...
CVE-2023-30876
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dave Ross Dave's WordPress Live Search plugin = 4.8.1 versions...
CVE-2023-30876 WordPress Dave's WordPress Live Search Plugin <= 4.8.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dave Ross Dave's WordPress Live Search plugin = 4.8.1 versions...
CVE-2023-30876
CVE-2023-30876 concerns Dave’s WordPress Live Search plugin (
WordPress Admin User Search Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Admin User Search Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID baed34e044d2 Credits Rafie Muhammad Patchstack Requir...
CVE-2021-4400
The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the bsearchprocesssettingsimport and bsearchprocesssettingsexport functions. This makes it possible for unauthenticat...
CVE-2021-4400
The CVE-2021-4400 entry concerns the WordPress Better Search plugin. A CSRF vulnerability exists in versions up to 2.5.2 caused by missing or incorrect nonce validation in bsearch_process_settings_import() and bsearch_process_settings_export(). This enables unauthenticated attackers to import and...
PT-2023-12512 · WordPress · The Better Search
Name of the Vulnerable Software and Affected Versions: The Better Search plugin for WordPress versions up to, and including, 2.5.2 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the bsearch process settings import and bsearch proces...
CVE-2023-2450
The FiboSearch - AJAX Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.23.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2021-4373
The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to import settings via forged request granted they can trick a site administrator into performing an action such as...
CVE-2021-4373
The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to import settings via forged request granted they can trick a site administrator into performing an action such as...
CVE-2021-4373 Better Search <= 2.5.2 - Cross-Site Request Forgery to Settings Import
The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to import settings via forged request granted they can trick a site administrator into performing an action such as...
WordPress Plugin JobSearch WP Job Board 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2022-47447
CVE-2022-47447 concerns the WordPress WP-Advanced-Search plugin. A CSRF vulnerability affects versions ≤ 3.3.8, with a fix released in 3.3.9. Patchstack lists unauthenticated access, indicating potential CSRF abuse to trigger unintended actions in a user’s account. Remediation: upgrade to 3.3.9 o...