Lucene search
+L

54 matches found

Cvelist
Cvelist
added 2024/08/19 5:14 p.m.30 views

CVE-2024-43247 WordPress WHMpress plugin <= 6.2-revision-5 - Subscriber+ Arbitrary Settings Change vulnerability

Missing Authorization vulnerability in creativeon WHMpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WHMpress: from n/a through 6.2-revision-5...

8.8CVSS0.00444EPSS
Exploits0References1
CVE
CVE
added 2024/08/19 5:14 p.m.55 views

CVE-2024-43247

CVE-2024-43247 (WHMpress) is a Missing Authorization issue affecting WHMpress &lt;= 6.2-revision-5. The vulnerability allows accessing functionality not properly constrained by ACLs, enabling unauthorized actions. Public details in connected docs describe the flaw as Missing Authorization to Sett...

8.8CVSS8.9AI score0.00444EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/08/19 12:0 a.m.4 views

WordPress plugin WHMpress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS6.6AI score0.00444EPSS
Exploits0References2
NVD
NVD
added 2024/08/18 10:15 p.m.11 views

CVE-2024-43246

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

7.1CVSS0.00255EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/08/18 10:15 p.m.3 views

CVE-2024-43246

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

7.1CVSS5.2AI score0.00255EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/18 9:24 p.m.12 views

CVE-2024-43246 WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

7.1CVSS7AI score0.00255EPSS
Exploits0References1
CVE
CVE
added 2024/08/18 9:24 p.m.47 views

CVE-2024-43246

CVE-2024-43246 refers to a reflected XSS in WHMpress (WHMCS WordPress integration plugin). Public sources in connected documents confirm this vulnerability affects WHMpress versions up to 6.2-revision-5 and describe it as an input-neutralization issue during web page generation. Red Hat and Wordf...

7.1CVSS6.9AI score0.00255EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/18 9:24 p.m.28 views

CVE-2024-43246 WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

7.1CVSS0.00255EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/08/18 12:0 a.m.7 views

WordPress plugin WHMpress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

7.1CVSS6.1AI score0.00255EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2024/08/14 12:0 a.m.5 views

VulnCheck KEV: CVE-2024-43246

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5...

7.1CVSS5.8AI score0.00255EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/08/12 12:16 p.m.9 views

WordPress WHMpress plugin <= 6.2-revision-5 - Subscriber+ Arbitrary Settings Change vulnerability

Subscriber+ Arbitrary Settings Change vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WHMpress versions = 6.2-revision-5...

8.8CVSS7AI score0.00444EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/08/12 12:14 p.m.11 views

WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WHMpress versions = 6.2-revision-5...

7.1CVSS6.1AI score0.00255EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/08/12 12:0 a.m.13 views

WordPress WHMpress Plugin <= 6.2-revision-5 is vulnerable to Settings Change

Software WHMpress Type Plugin Vulnerable versions = 6.2-revision-5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-43247 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 704c9a1f6dad Credits Dave Jong Patchstack Required...

8.8CVSS6.5AI score0.00444EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/08/12 12:0 a.m.16 views

WordPress WHMpress Plugin <= 6.2-revision-5 is vulnerable to Cross Site Scripting (XSS)

Software WHMpress Type Plugin Vulnerable versions = 6.2-revision-5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43246 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 366cbaa22db4 Credits Dave Jong Patchstack Required...

7.1CVSS6.6AI score0.00255EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder