36 matches found
CVE-2024-10516
CVE-2024-10516 Swift Performance Lite = 2.3.7.1 - Inclusão de Arquivo PHP Local não Autenticada via 'ajaxify' Descrição O plugin Swift Performance Lite para WordPress é vulnerável a Inclusão de Arquivo PHP Local em todas as versões até, e incluindo, 2.3.7.1 através da função 'ajaxify'. Isso...
CVE-2023-6289
CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - Fehlende Autorisierung für nicht authentifizierten Export der Einstellungen Beschreibung Das Swift Performance Lite Plugin für WordPress ist anfällig für unbefugten Datenzugriff aufgrund einer fehlenden Berechtigungsprüfung bei der Funktionalität,...
EUVD-2024-36580
Malicious code in bioql PyPI...
EUVD-2024-32297
Malicious code in bioql PyPI...
EUVD-2023-58533
Malicious code in bioql PyPI...
CVE-2024-3722
The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajaxhandler function in all versions up to, and including, 2.3.6.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to retriev...
CVE-2024-37511
Cross-Site Request Forgery CSRF vulnerability in swte Swift Performance Lite swift-performance-lite allows Cross Site Request Forgery.This issue affects Swift Performance Lite: from n/a through = 2.3.6.20...
CVE-2023-6289
The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens...
CVE-2024-10516
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
CVE-2024-37511
Cross-Site Request Forgery CSRF vulnerability in swte Swift Performance Lite swift-performance-lite allows Cross Site Request Forgery.This issue affects Swift Performance Lite: from n/a through = 2.3.6.20...
CVE-2024-37511 WordPress Swift Performance Lite plugin <= 2.3.6.20 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in swte Swift Performance Lite swift-performance-lite allows Cross Site Request Forgery.This issue affects Swift Performance Lite: from n/a through = 2.3.6.20...
CVE-2024-37511
CVE-2024-37511 is a CSRF vulnerability in the WordPress plugin Swift Performance Lite affecting versions up to 2.3.6.20. The CVE entry is supported by multiple sources (NVD; RH Red Hat advisory) that describe a Cross‑Site Request Forgery issue in this plugin. The available connected documents ind...
CVE-2024-37511 WordPress Swift Performance Lite plugin <= 2.3.6.20 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in SWTE Swift Performance Lite allows Cross Site Request Forgery.This issue affects Swift Performance Lite: from n/a through 2.3.6.20...
WordPress plugin Swift Performance Lite 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2025-2499 · Unknown · Swift Performance Lite
Name of the Vulnerable Software and Affected Versions: Swift Performance Lite versions prior to 2.3.6.20 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the us...
WordPress Swift Performance Lite plugin <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify' vulnerability
Unauthenticated Local PHP File Inclusion via 'ajaxify' vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Swift Performance Lite versions = 2.3.7.1...
CVE-2024-10516
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...