PT-2024-16460 · WordPress · Contact Form 7 Redirect & Thank You Page

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Redirect & Thank You Page plugin for WordPress versions up to, and including, 1.0.6 Description: The issue is related to Reflected Cross-Site Scripting via the tab parameter due to insufficient input sanitization and output...

bzip2 security update

1.0.6-27.0.1 - CVE-2019-12900: Accept as many selectors as the file format allows Orabug: 37266061 1.0.6-27 - Fixes out of bounds access in BZ2decompress RHEL-64929...

CVE-2024-51603

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mircea N. NMR Strava activities allows DOM-Based XSS.This issue affects NMR Strava activities: from n/a through 1.0.6...

CVE-2024-51590

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Hoosoft Hoo Addons for Elementor allows DOM-Based XSS.This issue affects Hoo Addons for Elementor: from n/a through 1.0.6...

WordPress plugin NMR Strava activities 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress plugin Hoo Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Delisho 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34733 · Unknown · Hoo Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Hoo Addons for Elementor versions 1.0.0 through 1.0.6 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows DOM-Based XSS. This problem arises...

WordPress Delisho plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Yusuf Patchstack Alliance in WordPress Plugin Delisho versions = 1.0.6...

PT-2024-32803 · Unknown · Minecraft Motd Parser

Name of the Vulnerable Software and Affected Versions: Minecraft MOTD Parser versions prior to 1.0.6 Description: The HtmlGenerator class in the Minecraft MOTD Parser library is subject to a potential cross-site scripting XSS attack through a parsed malformed Minecraft server MOTD. An attacker ca...

WordPress WP MyLinks plugin<= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WP MyLinks versions = 1.0.6...

WordPress WP MyLinks Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software WP MyLinks Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47371 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a980ce4c70f6 Credits SOPROBRO Required privilege Editor Publishe...

WordPress plugin video carousel slider with lightbox SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

WordPress Attributes for Blocks plugin <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributesForBlocks Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via attributesForBlocks Parameter vulnerability discovered by Francesco Carlucci in WordPress Plugin Attributes for Blocks versions = 1.0.6...

WordPress plugin Attributes for Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

PT-2024-38936 · WordPress · Attributes For Blocks

Name of the Vulnerable Software and Affected Versions: Attributes for Blocks plugin for WordPress versions up to, and including, 1.0.6 Description: The issue is related to Stored Cross-Site Scripting via the attributesForBlocks parameter due to insufficient input sanitization and output escaping...

WordPress Silesia Theme <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Silesia Type Theme Vulnerable versions = 1.0.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5788 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0a70857ded97 Credits Francesco Carlucci Required privile...

WordPress plugin Silesia security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Animated AL List <= 1.0.6 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC 1. Add a new project 2. Access the URL...

WordPress plugin Restrict for Elementor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...