36 matches found
CVE-2023-6289
CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - 授权缺失导致未认证设置导出 描述 Swift Performance Lite WordPress 插件在所有版本（包括 2.3.6.14）中，由于通过 admininit 函数挂载的功能缺少权限检查，导致存在未授权访问数据的风险。这使得未认证攻击者能够导出插件设置，其中可能包含 Cloudflare API 令牌。 root@kitploit: Severity: medium CVE ID: CVE-2023-6289 CVSS Score: 5.3 CVSS Metrics:...
CVE-2024-10516
CVE-2024-10516 Swift Performance Lite = 2.3.7.1 - Inclusión Local de Archivos PHP no Autenticada a través de 'ajaxify' Descripción El plugin Swift Performance Lite para WordPress es vulnerable a la Inclusión Local de Archivos PHP en todas las versiones hasta la 2.3.7.1 incluida, a través de la...
EUVD-2024-32297
Malicious code in bioql PyPI...
EUVD-2024-36580
Malicious code in bioql PyPI...
EUVD-2023-58533
Malicious code in bioql PyPI...
CVE-2024-3722
The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajaxhandler function in all versions up to, and including, 2.3.6.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to retriev...
CVE-2024-37511
Cross-Site Request Forgery CSRF vulnerability in swte Swift Performance Lite swift-performance-lite allows Cross Site Request Forgery.This issue affects Swift Performance Lite: from n/a through = 2.3.6.20...
CVE-2023-6289
The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens...
CVE-2024-10516
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
CVE-2024-37511
Cross-Site Request Forgery CSRF vulnerability in swte Swift Performance Lite swift-performance-lite allows Cross Site Request Forgery.This issue affects Swift Performance Lite: from n/a through = 2.3.6.20...
CVE-2024-37511 WordPress Swift Performance Lite plugin <= 2.3.6.20 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in swte Swift Performance Lite swift-performance-lite allows Cross Site Request Forgery.This issue affects Swift Performance Lite: from n/a through = 2.3.6.20...
CVE-2024-37511 WordPress Swift Performance Lite plugin <= 2.3.6.20 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in SWTE Swift Performance Lite allows Cross Site Request Forgery.This issue affects Swift Performance Lite: from n/a through 2.3.6.20...
CVE-2024-37511
CVE-2024-37511 is a CSRF vulnerability in the WordPress plugin Swift Performance Lite affecting versions up to 2.3.6.20. The CVE entry is supported by multiple sources (NVD; RH Red Hat advisory) that describe a Cross‑Site Request Forgery issue in this plugin. The available connected documents ind...
WordPress plugin Swift Performance Lite 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2025-2499 · Unknown · Swift Performance Lite
Name of the Vulnerable Software and Affected Versions: Swift Performance Lite versions prior to 2.3.6.20 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the us...
WordPress Swift Performance Lite plugin <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify' vulnerability
Unauthenticated Local PHP File Inclusion via 'ajaxify' vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Swift Performance Lite versions = 2.3.7.1...
CVE-2024-10516
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
