159 matches found
WordPress Plugin Tourfic Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-22753 · Unknown · Themefic Tourfic
Name of the Vulnerable Software and Affected Versions: Themefic Tourfic versions through 2.11.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can inject...
CVE-2024-29135: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through = 2.11.15...
CVE-2024-29134: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through = 2.11.8...
PT-2024-22756
Name of the Vulnerable Software and Affected Versions Themefic Tourfic versions prior to 2.11.8 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions prior to 2.11.8...
CVE-2024-29137: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through = 2.11.7...
WordPress Plugin Tourfic Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Plugin Tourfic Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
PT-2024-22755 · Unknown · Themefic Tourfic
Name of the Vulnerable Software and Affected Versions: Themefic Tourfic versions n/a through 2.11.17 Description: The issue is related to Deserialization of Untrusted Data. This is a type of vulnerability where an application deserializes data from an untrusted source, potentially allowing an...
WordPress Plugin Tourfic Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Tourfic has a code issue...
CVE-2024-29136: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through = 2.11.17...
PT-2024-22754
Name of the Vulnerable Software and Affected Versions Tourfic versions n/a through 2.11.15 Description The issue is related to an Unrestricted Upload of File with Dangerous Type. This allows for the upload of files with potentially dangerous types, which could lead to security issues...
WordPress Tourfic Plugin <= 2.11.8 is vulnerable to Cross Site Scripting (XSS)
Software Tourfic Type Plugin Vulnerable versions = 2.11.8 Fixed in 2.11.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29134 Patch priority Low CVSS severity Low 6.5 Developer Themefic PSID a61f73e8cf31 Credits LVT-tholv2k Required privilege Contributor Publishe...
WordPress Tourfic Plugin <= 2.11.7 is vulnerable to Cross Site Scripting (XSS)
Software Tourfic Type Plugin Vulnerable versions = 2.11.7 Fixed in 2.11.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29137 Patch priority Medium CVSS severity Medium 7.1 Developer Themefic PSID 46fbea9a6c10 Credits LVT-tholv2k Required privilege Unauthenticate...
WordPress Tourfic Plugin <= 2.11.17 is vulnerable to PHP Object Injection
Software Tourfic Type Plugin Vulnerable versions = 2.11.17 Fixed in 2.11.19 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-29136 Patch priority High CVSS severity High 8.5 Developer Themefic PSID 0c2f99b8302e Credits LVT-tholv2k Required privilege Subscriber Published...
WordPress Tourfic Plugin <= 2.11.15 is vulnerable to Arbitrary File Upload
Software Tourfic Type Plugin Vulnerable versions = 2.11.15 Fixed in 2.11.16 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-29135 Patch priority High CVSS severity High 9.9 Developer Themefic PSID b543d4424f73 Credits LVT-tholv2k Required privilege Subscriber Publishe...
VulnCheck KEV: CVE-2024-29135
Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through = 2.11.15...
VulnCheck KEV: CVE-2024-29137
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through = 2.11.7...