52 matches found
WordPress plugin WP Travel 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-30906 · WordPress · Wp Travel
Name of the Vulnerable Software and Affected Versions: WP Travel versions through 9.3.1 Description: The issue involves Improper Neutralization of Input During Web Page Generation, which is also known as Cross-site Scripting XSS. This problem allows for Stored XSS in WP Travel. Recommendations: F...
WordPress plugin WP Travel 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Sharanabasappa in WordPress Plugin WP Travel versions = 9.3.1...
WordPress adivaha Travel Plugin 2.3 - Reflected XSS Vulnerability
Exploit Title: WordPress adivaha Travel Plugin 2.3 - Reflected XSS Exploit Author: CraCkEr Vendor: adivaha - Travel Tech Company Vendor Homepage: https://www.adivaha.com/ Software Link: https://wordpress.org/plugins/adiaha-hotel/ Demo: https://www.adivaha.com/demo/adivaha-online/ Version: 2.3...
WordPress adivaha Travel Plugin 2.3 - SQL Injection Vulnerability
Exploit Title: WordPress adivaha Travel Plugin 2.3 - SQL Injection Exploit Author: CraCkEr Vendor: adivaha - Travel Tech Company Vendor Homepage: https://www.adivaha.com/ Software Link: https://wordpress.org/plugins/adiaha-hotel/ Demo: https://www.adivaha.com/demo/adivaha-online/ Version: 2.3...
WordPress adivaha Travel Plugin 2.3 - Reflected XSS
Exploit Title: WordPress adivaha Travel Plugin 2.3 - Reflected XSS Exploit Author: CraCkEr Date: 29/07/2023 Vendor: adivaha - Travel Tech Company Vendor Homepage: https://www.adivaha.com/ Software Link: https://wordpress.org/plugins/adiaha-hotel/ Demo: https://www.adivaha.com/demo/adivaha-online/...
CVE-2021-4389 WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass
The WP Travel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.4.6. This is due to missing or incorrect nonce validation on the savemetadata function. This makes it possible for unauthenticated attackers to save metadata for travel posts via a...
CVE-2021-4389 WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass
The WP Travel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.4.6. This is due to missing or incorrect nonce validation on the savemetadata function. This makes it possible for unauthenticated attackers to save metadata for travel posts via a...
WordPress WP Travel plugin <= 4.4.6 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by NintechNet in WordPress WP Travel plugin versions = 4.4.6. Solution Update the WordPress WP Travel plugin to the latest available version at least 4.4.7...
WordPress nd-travel plugin unauthorized operation vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. nd-travel is a plugin used in it for selling travel products online. A security vulnerability exists in WordPress nd-travel plugin...
