79 matches found
CVE-2022-36375 WordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerability
Authenticated high role user WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin = 3.6.0 at WordPress...
CVE-2022-36375
CVE-2022-36375 concerns the WordPress Tabs plugin (versions ≤ 3.6.0). The vulnerability allows an authenticated, high-privilege user to change plugin options, as described across multiple sources. The root cause appears to be an insecure options-change flow that can be exploited by someone with e...
PT-2022-23335 · Biplob Adhikari · Tabs
Name of the Vulnerable Software and Affected Versions: Biplob Adhikari's Tabs plugin versions = 3.6.0 Description: The issue is related to an authenticated WordPress Options Change vulnerability. It affects Biplob Adhikari's Tabs plugin at WordPress, where a high-role user can authenticate and...
WordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerability
Authenticated WordPress Options Change vulnerability discovered by m0ze Patchstack in WordPress Tabs plugin versions = 3.6.0. Solution Update the WordPress Tabs plugin to the latest available version at least 3.7.0...
WordPress plugin Tabs 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2022-1298
The Tabs WordPress plugin before 2.2.8 does not sanitise and escape Tab descriptions, which could allow high privileged users with a role as low as editor to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
Cross site scripting
The Tabs WordPress plugin before 2.2.8 does not sanitise and escape Tab descriptions, which could allow high privileged users with a role as low as editor to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-1298
CVE-2022-1298 affects the WordPress Tabs plugin up to version 2.2.8. The vulnerability arises from failure to sanitize and escape Tab descriptions, enabling stored Cross-Site Scripting (XSS) by users with a role as low as editor, even when unfiltered_html is disallowed. The impact is stored XSS t...
WordPress plugin Tabs 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin Tabs is vulnerable to a cross-site scripting vulnerability that stems from the Tabs...
WordPress Tabs plugin <= 2.2.7 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Fayçal CHENA in WordPress Tabs plugin versions = 2.2.7. Solution Update the WordPress Tabs plugin to the latest available version at least 2.2.8...
CVE-2021-36893
Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in Responsive Tabs WordPress plugin = 4.0.5...
CVE-2022-0621
The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
Tabs < 3.6.0 - Unauthenticated Arbitrary Option Update
The plugin does not have any authorisation in its REST API endpoint, one of them could allow unauthenticated attackers to update arbitrary blog options...
WordPress Tabs plugin <= 3.5.4 - Unauthenticated Arbitrary Option Update
Unauthenticated Arbitrary Option Update discovered in WordPress Tabs plugin versions = 3.5.4. Solution Update the WordPress Tabs plugin to the latest available version at least 3.6.0...
Tabs < 3.6.0 - Unauthenticated Arbitrary Option Update
The plugin does not have any authorisation in its REST API endpoint, one of them could allow unauthenticated attackers to update arbitrary blog options. PoC...
Code injection
The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter accesstoken, accesstokensecret, consumerkey, and consumersecret values by reading the dcwptwitter.php source code. This leads to Twitter account takeover...
WordPress Game-Tabs plugin 'n' Parameter Cross Site Scripting Vulnerability
WordPress Game-Tabs Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-4531
The CVE-2014-4531 entry describes a Cross-Site Scripting (XSS) vulnerability in WordPress Game-Tabs plugin versions 0.4.0 and earlier, exploitable via the n parameter in main_page.php. According to the provided data, affected software is the WordPress Game-Tabs plugin
