WordPress plugin WPBakery Visual Composer WHMCS Elements has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Void Elementor WHMCS Elements For Elementor Page Builder versions = 2.0.1.2...

PT-2025-9077

Name of the Vulnerable Software and Affected Versions The WHMPress - WHMCS Client Area plugin for WordPress versions up to, and including, 4.3-revision-3 Description The issue allows unauthorized modification of data, potentially leading to privilege escalation, due to a missing capability check ...

CVE-2024-9193: Improper Control of Filename for Include/Require Statement in PHP Program

The WHMpress - WHMCS WordPress Integration Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.3-revision-0 via the whmpressdomainsearchajaxextendedresults function. This makes it possible for unauthenticated attackers to include and execute...

CVE-2024-9195: Missing Authorization

The WHMPress - WHMCS Client Area plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the updatesettings case in the /admin/ajax.php file in all versions up to, and including, 4.3-revision-3. This makes ...

PT-2025-9076

Name of the Vulnerable Software and Affected Versions The WHMpress - WHMCS WordPress Integration Plugin versions up to, and including, 6.3-revision-0 Description The issue allows unauthenticated attackers to include and execute arbitrary files on the server via the whmpress domain search ajax...

WordPress WHMPress - WHMCS Client Area plugin <= 4.3-revision-3 - Authenticated (Subscriber+) Arbitrary Options Update vulnerability

WordPress WHMPress - WHMCS Client Area plugin = 4.3-revision-3 - Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by Tonn in WordPress Plugin WHMCS Client Area for WordPress by WHMpress versions = 4.3-revision-3...

CVE-2024-10172

The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's voidwbwhmcselaoutssearch shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. Thi...

CVE-2024-10172

The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's voidwbwhmcselaoutssearch shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. Thi...

CVE-2024-10172 WPBakery Visual Composer WHMCS Elements <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via void_wbwhmcse_laouts_search Shortcode

The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's voidwbwhmcselaoutssearch shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. Thi...

CVE-2024-10172: Improper Neutralization of Input During Web Page Generation

The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's voidwbwhmcselaoutssearch shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. Thi...

WordPress plugin WPBakery Visual Composer WHMCS Elements has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via void_wbwhmcse_laouts_search Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via voidwbwhmcselaoutssearch Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin WPBakery Visual Composer WHMCS Elements versions = 1.0.4...

WordPress WPBakery Visual Composer WHMCS Elements Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software WPBakery Visual Composer WHMCS Elements Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10172 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 30c8a799718e Credits...

PT-2024-16086 · WordPress · Wpbakery Visual Composer Whmcs Elements

Name of the Vulnerable Software and Affected Versions: WPBakery Visual Composer WHMCS Elements plugin for WordPress versions up to, and including, 1.0.4 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied...

CVE-2024-40579

Cross Site Scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 allows a remote attacker to obtain sensitive information via modification of the hostname parameter...

PT-2024-28927

Name of the Vulnerable Software and Affected Versions Virtuozzo Hybrid Server for WHMCS Open Source version 1.7.1 Description A Cross Site Scripting vulnerability allows a remote attacker to obtain sensitive information via modification of the hostname parameter. This issue enables data exposure...

CVE-2024-40579: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 allows a remote attacker to obtain sensitive information via modification of the hostname parameter...

CVE-2024-40579

Cross Site Scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 allows a remote attacker to obtain sensitive information via modification of the hostname parameter...

CVE-2024-40579

A Cross Site Scripting (XSS) vulnerability exists in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 . A remote attacker can obtain sensitive information by modifying the hostname parameter, which leads to data exposure. As a temporary workaround, it is recommended to restrict access to the...