648 matches found
WordPress Plugin WordPress Simple HTML Sitemap Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress XML Sitemap Generator for Google Plugin < 4.1.3 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:googlexmlsitemapsproject:googlexmlsitemaps"; ifdescription...
WordPress WP Simple HTML Sitemap Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)
Software WP Simple HTML Sitemap Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45067 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5c63e779faff Credits deokhunKim Required...
The vulnerability of the Sitemap plugin in the click5 content management system for WordPress allows a hacker to create an administrator-account and perform a CSRF attack.
The vulnerability of the Sitemap plugin in the click5 content management system for WordPress is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to create an account with administrator privileges and carry out a CSRF attack...
WordPress Simple Wp Sitemap Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Simple Wp Sitemap Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-24380 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 54c8db8e8d0b Credits Mika Required...
WordPress Seo By 10Web Cross Site Scripting
Tittle: WordPress Plugin Seo By 10Web 4. Save to trigger the XSS. Classification: Type XSS OWASP top 10 A7: Cross-Site Scripting XSS CWE-79 wpScan: https://wpscan.com/vulnerability/a76b6d22-1e00-428a-8a04-12162bd0d992...
WordPress Simple Sitemap – Create a Responsive HTML Sitemap Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS)
Software Simple Sitemap – Create a Responsive HTML Sitemap Type Plugin Vulnerable versions = 3.5.9 Fixed in 3.5.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6b3d5500bd75 Credi...
WordPress WP Disable Sitemap Plugin <= 1.1.6.4 is vulnerable to Cross Site Scripting (XSS)
Software WP Disable Sitemap Type Plugin Vulnerable versions = 1.1.6.4 Fixed in 1.1.6.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ee9a57bb1bb5 Credits Rafie Muhammad Patchstack...
CVE-2023-23869
Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...
CVE-2023-23869
Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...
CVE-2023-1780
The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-1780
The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
Cross site scripting
The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...
CVE-2023-23869
CVE-2023-23869 is a CSRF vulnerability in the WordPress Google XML Sitemap for Mobile plugin (≤1.6.1). Public entries document an unauthenticated CSRF issue tied to the plugin, with impact described variably: NVD lists high impact (C/H, I/H, A/H) and overall CVSS v3.1 score of 8.8, while Patchsta...
CVE-2023-23869 WordPress Google XML Sitemap for Mobile Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...
CVE-2023-23869 WordPress Google XML Sitemap for Mobile Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...
Wrodpress Plugin google-mobile-sitemap 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. Wrodpress Plugin google-mobile-sitemap A...
PT-2023-19268 · Amit Agarwal · Google Xml Sitemap For Mobile
Name of the Vulnerable Software and Affected Versions: Amit Agarwal Google XML Sitemap for Mobile plugin versions = 1.6.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions ...
WordPress plugin Companion Sitemap Generator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...