WordPress plugin WordPress Team Manager Path Traversal Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

WordPress Team Manager plugin <= 2.1.12 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by 4rCanJ0x! Patchstack Alliance in WordPress Plugin Team Manager versions = 2.1.12...

WordPress WordPress Team Manager Plugin <= 2.1.12 is vulnerable to Local File Inclusion

Software WordPress Team Manager Type Plugin Vulnerable versions = 2.1.12 Fixed in 2.1.13 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-38704 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 772c457874f8 Credits 4rCanJ0x! Required...

CVE-2022-29406

Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in DynamicWebLab's WordPress Team Manager plugin = 1.6.9 at WordPress...

CVE-2022-29406

Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in DynamicWebLab's WordPress Team Manager plugin = 1.6.9 at WordPress...

Cross site scripting

Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in DynamicWebLab's WordPress Team Manager plugin = 1.6.9 at WordPress...

CVE-2022-29406 WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in DynamicWebLab's WordPress Team Manager plugin = 1.6.9 at WordPress...

CVE-2022-29406 WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in DynamicWebLab's WordPress Team Manager plugin = 1.6.9 at WordPress...

CVE-2022-29406

CVE-2022-29406 affects the DynamicWebLab WordPress Team Manager plugin

CVE-2022-29406

Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in DynamicWebLab's WordPress Team Manager plugin = 1.6.9 at WordPress...

WordPress Team Manager <= 1.6.9 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in the WordPress Team Manager plugin versions = 1.6.9. Solution Deactivate and delete. No reply from the vendor...

DaisyThemes WordPress Easy Team Manager SQL Injection Vulnerability

DaisyThemes WordPress Easy Team Manager is a team management plugin for WordPress developed by DaisyThemes UK. A SQL injection vulnerability exists in DaisyThemes WordPress Easy Team Manager version 1.3.2, which stems from a vulnerability in . /easy-team-manager/inc/easyteammanagerdescedit.php fi...

CVE-2017-1002023

Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easyteammanagerdescedit.php...

CVE-2017-1002023

Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easyteammanagerdescedit.php...

CVE-2017-1002023

The CVE affects the WordPress plugin Easy Team Manager v1.3.2. Root cause: the code in ./easy-team-manager/inc/easy_team_manager_desc_edit.php fails to sanitize the id before using it in an SQL statement, enabling SQL injection. Reports describe it as an authenticated blind SQL injection vulnerab...

Mixmax: Stored XSS templates -> 'call for action' feature

Hi Jeff, Reporting the Stored XSS in template section on 'call for action' button. Already discussed in mail 1 Login to Mixmax and navigate to template section 2 Click on enhance and select call for action button 3 Enter anything in button text and in URL enter XSS payload...

Easy Team Manager 1.3.2 - Authenticated Blind SQL Injection

The easy-team-manager WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...