5221 matches found
CVE-2023-46211
CVE-2023-46211 is a stored Cross-Site Scripting (XSS) vulnerability in the Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin, affected versions
CVE-2023-46211 WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin = 3.19.14 versions...
CVE-2023-46211: Improper Neutralization of Input During Web Page Generation
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin = 3.19.14 versions...
WordPress plugin Ultimate Addons for WPBakery Page Builder Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Ultimate Taxonomy Manager <= 2.0 - Reflected XSS
Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-45837
Unauth. Reflected Cross-Site Scripting XSS vulnerability in XYDAC Ultimate Taxonomy Manager plugin = 2.0 versions...
CVE-2023-45837
Unauth. Reflected Cross-Site Scripting XSS vulnerability in XYDAC Ultimate Taxonomy Manager plugin = 2.0 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in XYDAC Ultimate Taxonomy Manager plugin = 2.0 versions...
WordPress Plugin Ultimate Taxonomy Manager Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-45837
CVE-2023-45837 : Unauthenticated reflected XSS in XYDAC Ultimate Taxonomy Manager plugin (versions 2.0 when available, since no fixed version is listed in the provided materials.
PT-2023-29724 · Xydac · Xydac Ultimate Taxonomy Manager Plugin
Name of the Vulnerable Software and Affected Versions: XYDAC Ultimate Taxonomy Manager plugin versions = 2.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for the execution of malicious scripts on a user's browser,...
CVE-2023-45837: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in XYDAC Ultimate Taxonomy Manager plugin = 2.0 versions...
WordPress Tab Ultimate Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)
Software Tab Ultimate Type Plugin Vulnerable versions = 1.3 Fixed in 1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5667 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 6b4d31988178 Credits István Márton Required privileg...
CVE-2023-46085
Cross-Site Request Forgery CSRF vulnerability in Wpmet Wp Ultimate Review plugin = 2.2.4 versions...
CVE-2023-46085
Cross-Site Request Forgery CSRF vulnerability in Wpmet Wp Ultimate Review plugin = 2.2.4 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Wpmet Wp Ultimate Review plugin = 2.2.4 versions...
CVE-2023-46085 WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Wpmet Wp Ultimate Review plugin = 2.2.4 versions...
CVE-2023-46085 WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Wpmet Wp Ultimate Review plugin = 2.2.4 versions...
CVE-2023-46085
CVE-2023-46085 affects the WordPress plugin WP Ultimate Review (Wpmet) . The vulnerability is a Cross-Site Request Forgery (CSRF) in the plugin versions ≤ 2.2.4. Public records in the connected documents cite an actionable CSRF issue associated with this CVE, with remediation guidance indicating ...
WordPress Plugin Wp Ultimate Review Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Wp Ultimate Review...