349 matches found
WordPress Open Graph plugin <= 1.11.2 - Unauthenticated Sensitive Information Exposure vulnerability
Unauthenticated Sensitive Information Exposure vulnerability discovered by Krzysztof Zając in WordPress Plugin Open Graph versions = 1.11.2...
WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure vulnerability
Unauthenticated Sensitive Information Exposure vulnerability discovered by Tim Coen in WordPress Plugin Contact Form 7 Database Addon – CFDB7 versions = 1.2.6.8...
PT-2024-14827 · WordPress +1 · Wordpress +1
Name of the Vulnerable Software and Affected Versions: WordPress Core versions up to, and including, 6.4.3 Description: The issue allows unauthenticated attackers to expose the slug of a custom post whose publicly queryable post status has been set to 'false' via the redirect guess 404 permalink...
WordPress Essential Addons for Elementor plugin <= 5.9.13 - Unauthenticated Sensitive Information Exposure vulnerability
Unauthenticated Sensitive Information Exposure vulnerability discovered by Ankit Patel in WordPress Plugin Essential Addons for Elementor versions = 5.9.13...
Intel Ethernet Adapters and Intel Ethernet Controller I225 Manageability firmware security vulnerability
Intel Ethernet Adapters and Intel Ethernet Controllers are products of Intel Corporation, USA. Intel Ethernet Adapters are Ethernet adapters. Intel Ethernet Controllers are Ethernet controllers. Intel Ethernet Adapters and Intel Ethernet Controllers are products of Intel Corporation. A security...
CVE-2023-4490
The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...
PYSEC-2023-154
Datasette is an open source multi-tool for exploring and publishing data. This bug affects Datasette instances running a Datasette 1.0 alpha - 1.0a0, 1.0a1, 1.0a2 or 1.0a3 - in an online accessible location but with authentication enabled using a plugin such as datasette-auth-passwords. The /-/ap...
CVE-2021-40604
A Server-Side Request Forgery SSRF vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated us...