33 matches found
WordPress Forminator Plugin <= 1.29.1 is vulnerable to Sensitive Data Exposure
Software Forminator Type Plugin Vulnerable versions = 1.29.1 Fixed in 1.29.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-7389 Patch priority Low CVSS severity Low 5.8 Developer WPMU DEV PSID d0a947757282 Credits Sean Murphy Required privilege...
CVE-2024-3053
The Forminator – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ forminatorform shortcode attribute in versions up to, and including, 1.29.2 due to insufficient input sanitization and output escaping. This makes it...
WordPress Forminator Plugin <= 1.29.2 is vulnerable to Cross Site Scripting (XSS)
Software Forminator Type Plugin Vulnerable versions = 1.29.2 Fixed in 1.29.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3053 Patch priority Low CVSS severity Low 6.5 Developer WPMU DEV PSID 65d61e38cc9c Credits wesley wcraft Required privilege...
VulnCheck KEV: CVE-2024-3053
The Forminator – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ forminatorform shortcode attribute in versions up to, and including, 1.29.2 due to insufficient input sanitization and output escaping. This makes it...
PT-2024-23458 · WordPress · The Forminator Forms
Name of the Vulnerable Software and Affected Versions: The Forminator – Contact Form, Payment Form & Custom Form Builder plugin for WordPress versions up to, and including, 1.29.2 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output...
WordPress Plugin Forminator 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-27919
Envoy CVE-2024-27919 affects the HTTP/2 stack in versions 1.29.0 and 1.29.1, where unlimited MEMORY growth can be triggered by a flood of CONTINUATION frames, leading to DoS. A fix is available in version 1.29.2; as workarounds, downgrade to 1.28.1 or earlier or disable HTTP/2 for downstream conn...
SpiceDB Security Vulnerabilities
SpiceDB is a fine-grained permission database inspired by Google Zanzibar. A security vulnerability exists in SpiceDB versions prior to 1.29.2 that stems from an integer overflow vulnerability in the CheckPermission, BulkCheckPermission, and LookupSubjects API methods...
PT-2023-21299 · Pikpak · Pikpak
Name of the Vulnerable Software and Affected Versions: pikpak version 1.29.2 Description: The Android version of pikpak was discovered to contain an information leak via the debug interface. Recommendations: For pikpak version 1.29.2, consider disabling the debug interface as a temporary workarou...
PikPak 安全漏洞
PikPak is a private online disk. A security vulnerability exists in PikPak v1.29.2, which stems from information leakage through the debugging interface...
Security update for netdata (moderate)
openSUSE Security Update: Security update for netdata Announcement ID: openSUSE-SU-2021:0730-1 Rating: moderate References: 1139094 1139095 1139098 Cross-References: CVE-2018-18836 CVE-2018-18837 CVE-2018-18838 CVE-2018-18839 CVSS scores: CVE-2018-18836 NVD : 6.5...
MediaWiki Enumeration Vulnerability
MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. An enumeration vulnerability in MediaWiki versions prior to 1.27.4, 1.28.x...