209 matches found
CVE-2023-50852
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in StylemixThemes Booking Calendar | Appointment Booking | BookIt.This issue affects Booking Calendar | Appointment Booking | BookIt: from n/a through 2.4.3...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in StylemixThemes Booking Calendar | Appointment Booking | BookIt.This issue affects Booking Calendar | Appointment Booking | BookIt: from n/a through 2.4.3...
CVE-2023-50852
CVE-2023-50852 is an authenticated (Administrator+) SQL Injection in Booking Calendar / BookIt WordPress plugin affecting versions up to 2.4.3. The root cause is improper neutralization of SQL elements. A patch exists in 2.4.3; upgrade to a patched version to remediate.
PT-2023-31684 · Stylemixthemes · Stylemixthemes Booking Calendar
Name of the Vulnerable Software and Affected Versions: StylemixThemes Booking Calendar | Appointment Booking | BookIt versions n/a through 2.4.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allo...
CVE-2023-46207
Server-Side Request Forgery SSRF vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing.This issue affects Motors – Car Dealer, Classifieds & Listing: from n/a through 1.4.6...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing.This issue affects Motors – Car Dealer, Classifieds & Listing: from n/a through 1.4.6...
CVE-2023-46208
Unauth. Reflected Cross-Site Scripting XSS vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin = 1.4.6 versions...
CVE-2023-46208
Unauth. Reflected Cross-Site Scripting XSS vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin = 1.4.6 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin = 1.4.6 versions...
CVE-2023-46208
CVE-2023-46208 is an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin, affecting versions
PT-2023-29905 · Stylemixthemes · Stylemixthemes Motors – Car Dealer
Name of the Vulnerable Software and Affected Versions: StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin versions 1.4.6 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into t...
CVE-2023-35093
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin = 3.0.8 versions allows any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order like email, username, and more...
Improper access control
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin = 3.0.8 versions allows any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order like email, username, and more...
CVE-2023-35090
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin = 3.0.7 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin = 3.0.7 versions...
CVE-2023-35093 WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access Control
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin = 3.0.8 versions allows any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order like email, username, and more...
CVE-2023-35093
CVE-2023-35093 affects StylemixThemes MasterStudy LMS WordPress Plugin (
CVE-2023-35090
CVE-2023-35090 is a Stored XSS vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin for Online Courses and Education, with affected versions cited as <= 3.0.7 (NVD) and
CVE-2023-35090 WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin = 3.0.7 versions...
Critical Flaw Found in WordPress Plugin for WooCommerce Used by 30,000 Websites
A critical security flaw has been disclosed in the WordPress "Abandoned Cart Lite for WooCommerce" plugin that's installed on more than 30,000 websites. "This vulnerability makes it possible for an attacker to gain access to the accounts of users who have abandoned their carts, who are typically...