958 matches found
CVE-2022-47149
Cross-Site Request Forgery CSRF vulnerability in Pretty Links plugin = 3.4.0 versions...
CVE-2023-2715
The Groundhogg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'submitticket' function in versions up to, and including, 2.7.9.8. This makes it possible for authenticated attackers to create a support ticket that sends the website's...
WordPress plugin Video Gallery 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2023-23789
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...
CVE-2022-45080
Cross-Site Request Forgery CSRF vulnerability in KrishaWeb Add Multiple Marker plugin = 1.2 versions...
CVE-2022-44631
Auth. author+ Stored Cross-Site Scripting XSS vulnerability in 1app Technologies, Inc 1app Business Forms plugin = 1.0.0 versions...
CVE-2023-28340
Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack...
CVE-2023-26529
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in DupeOff.Com DupeOff plugin = 1.6 versions...
CVE-2023-0273 Custom Content Shortcode <= 4.0.2 - Contributor+ Stored XSS
The Custom Content Shortcode WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...
CVE-2023-23721 WordPress Admin Log Plugin <= 1.50 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in David Gwyer Admin Log plugin = 1.50 versions...
CVE-2023-25782
Auth. admin+ vulnerability in Second2none Service Area Postcode Checker plugin = 2.0.8 versions...
SUSE CVE-2019-18458
An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions issue 2 of 4...
SUSE CVE-2019-20913
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwgencodeentity in commonentitydata.spec...
RackN Digital Rebar 安全漏洞
RackN Digital Rebar is a platform from RackN, Inc. extends IaC automation with reusable workflows that can be deployed on any platform. A security vulnerability exists in RackN Digital Rebar versions 4.6.14 and earlier, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through...
PT-2022-27861 · Veritas · Veritas Netbackup Flex Scale
Name of the Vulnerable Software and Affected Versions: Veritas NetBackup Flex Scale versions through 3.0 Description: An issue was discovered that allows a non-privileged user to escape a restricted shell and execute privileged commands. Recommendations: For Veritas NetBackup Flex Scale versions...
CVE-2022-41136
Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS in Vladimir Anokhin's Shortcodes Ultimate plugin = 5.12.0 on WordPress...
CVE-2022-36365
Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Crossword plugin = 1.1.10 at WordPress...
CVE-2022-2844
A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This affects an unknown part of the file /wp/?cpmvcid=1&cpmvcdoaction=mvparse&f=datafeed&calid=1&monthindex=1&method=adddetails&id=2 of the component Calendar Handler. The manipulation...