205 matches found
WordPress GDPR Tools plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Abdi Pranata in WordPress Plugin GDPR Tools versions = 1.0.2...
CVE-2024-13853 SEO Tools <= 4.0.7 - Reflected XSS
The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
com.cloudbees.jenkins.plugins:custom-tools-plugin (>=0.3, <=0.4.4), com.datical.integration.jenkins:datical-db-plugin (>=1.0.3, <=1.0.35) +47 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.480.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.480.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin =0.3, =1.0.3, =1.0.0, =0.1, =0.1, =0.1.0,...
com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.399)
org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...
WordPress Tailored Tools Plugin <= 1.8.4 is vulnerable to Cross Site Scripting (XSS)
Software Tailored Tools Type Plugin Vulnerable versions = 1.8.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52503 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0da9a28c2169 Credits CTRL Chance Required privilege Contributo...
com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.399)
org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...
com.blazemeter.plugins:blazemeterjenkinsplugin (>=1.0-beta-1, <=1.08-beta-1), com.brianfromoregon:caliper-ci (>=2.1, <=2.2) +196 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:remoting (2.4)
org.jenkins-ci.main:remoting MAVEN version 2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:remoting and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =1.0-beta-1, =2.1, =1.0, =0.1, =0.9, =1.2.11, =1.4.0,...
CVE-2022-43453 WordPress WP Tools plugin <= 3.41 - Auth. Broken Access Control vulnerability
Missing Authorization vulnerability in Bill Minozzi WP Tools.This issue affects WP Tools: from n/a through 3.41...
WordPress plugin WP Tools security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
CVE-2023-27453
Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.3.1 versions...
CVE-2023-27453
Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.3.1 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.3.1 versions...
CVE-2023-27453 WordPress LWS Tools Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.3.1 versions...
CVE-2023-27453
CVE-2023-27453 is a CSRF in the WordPress plugin LWS Tools (
WordPress Plugin Webmaster Tools Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2023-46093 WordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in LionScripts.Com Webmaster Tools plugin = 2.0 versions...
CVE-2023-46093
CVE-2023-46093 : Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in the LionScripts.Com Webmaster Tools plugin, affected versions
CVE-2023-35774
Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.4.1 versions...