65 matches found
WordPress Fast Flow plugin <= 1.2.16 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Fast Flow versions = 1.2.16...
CVE-2024-13797
The PressMart - Modern Elementor WooCommerce WordPress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.16. This is due to the software allowing users to execute an action that does not properly validate a value before running...
CVE-2025-22719 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikAppointments Services Booking Calendar vikappointments allows Stored XSS.This issue affects VikAppointments Services Booking Calendar: from n/a through = 1.2.16...
WordPress plugin VikAppointments Services Booking Calendar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin...
PT-2025-4646 · Unknown · Vikappointments Services Booking Calendar
Name of the Vulnerable Software and Affected Versions: VikAppointments Services Booking Calendar versions 1.2.16 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an attacker can...
WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin VikAppointments Services Booking Calendar versions = 1.2.16...
Debian dla-3884 : cacti - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3884 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3884-1 [email protected]...
WordPress Addonify plugin <= 1.2.16 - Unauthenticated Full Path Dislcosure vulnerability
Unauthenticated Full Path Dislcosure vulnerability discovered by stealthcopter in WordPress Plugin Addonify versions = 1.2.16...
PT-2024-23916 · Supsystic · Supsystic Ultimate Maps
Name of the Vulnerable Software and Affected Versions: Supsystic Ultimate Maps by Supsystic versions 1.2.16 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web...
WordPress Plugin Ultimate Maps by Supsystic 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Ultimate Maps by Supsystic...
WordPress Ultimate Maps plugin <= 1.2.16 - Cross Site Request Forgery vulnerability
Cross Site Request Forgery vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Ultimate Maps by Supsystic versions = 1.2.16...
zlog Security Vulnerabilities
zlog is a reliable, high-performance, thread-safe, flexible, model-clear, pure C logging library by Hardy Simpson, an individual developer in China. A security vulnerability exists in zlog version 1.2.16. An attacker can exploit this vulnerability to execute arbitrary code...
WordPress plugin Ultimate Maps by Supsystic Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability in the WordPress...
CVE-2023-30489
Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Email Subscription Popup plugin = 1.2.16 versions...
PT-2023-23050 · WordPress · Smtp Mail
Name of the Vulnerable Software and Affected Versions: SMTP Mail plugin for WordPress versions up to, and including, 1.2.16 Description: The issue is related to Stored Cross-Site Scripting via an email subject due to insufficient input sanitization and output escaping when the 'Save Data SendMail...
CVE-2023-2289
The wordpress vertical image slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘searchterm’ parameter in versions up to, and including, 1.2.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...
UBUNTU-CVE-2023-0821
HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4...
WordPress plugin Search & Filter 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...