CVE-2024-43247

CVE-2024-43247 (WHMpress) is a Missing Authorization issue affecting WHMpress <= 6.2-revision-5. The vulnerability allows accessing functionality not properly constrained by ACLs, enabling unauthorized actions. Public details in connected docs describe the flaw as Missing Authorization to Sett...

CVE-2024-43247 WordPress WHMpress plugin <= 6.2-revision-5 - Subscriber+ Arbitrary Settings Change vulnerability

Missing Authorization vulnerability in creativeon WHMpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WHMpress: from n/a through 6.2-revision-5...

WordPress plugin WHMpress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-43246

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

CVE-2024-43246

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

CVE-2024-43246

CVE-2024-43246 refers to a reflected XSS in WHMpress (WHMCS WordPress integration plugin). Public sources in connected documents confirm this vulnerability affects WHMpress versions up to 6.2-revision-5 and describe it as an input-neutralization issue during web page generation. Red Hat and Wordf...

CVE-2024-43246 WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

CVE-2024-43246 WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

WordPress plugin WHMpress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

VulnCheck KEV: CVE-2024-43246

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

WordPress WHMpress plugin <= 6.2-revision-5 - Subscriber+ Arbitrary Settings Change vulnerability

Subscriber+ Arbitrary Settings Change vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WHMpress versions = 6.2-revision-5...

WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WHMpress versions = 6.2-revision-5...

WordPress WHMpress Plugin <= 6.2-revision-5 is vulnerable to Cross Site Scripting (XSS)

Software WHMpress Type Plugin Vulnerable versions = 6.2-revision-5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43246 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 366cbaa22db4 Credits Dave Jong Patchstack Required...

WordPress WHMpress Plugin <= 6.2-revision-5 is vulnerable to Settings Change

Software WHMpress Type Plugin Vulnerable versions = 6.2-revision-5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-43247 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 704c9a1f6dad Credits Dave Jong Patchstack Required...