675 matches found
CVE-2023-44990
CVE-2023-44990 affects the WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress, specifically versions
PT-2023-29334 · WordPress · Realmag777 Wolf – Wordpress Posts Bulk Editor/Manager Professional
Name of the Vulnerable Software and Affected Versions: realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin versions 1.0.7.1 and earlier Description: The issue is related to an Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability. This means that an attacker...
WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software WOLF Type Plugin Vulnerable versions = 1.0.7.1 Fixed in 1.0.7.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46152 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a3a5aaefb1cc Credits thiennv Required privilege...
WordPress Plugin WOLF - WordPress Posts Bulk Editor and Manager Professional Cross-site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WOLF - WordPress Posts Bul...
WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Scripting (XSS)
Software WOLF Type Plugin Vulnerable versions = 1.0.7.1 Fixed in 1.0.7.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-44990 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID abaa00cbbafc Credits emad Required privilege Administrator Publish...
CVE-2023-31218
Cross-Site Request Forgery CSRF leading to Stored Cross-Site Scripting XSS vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.6 versions...
CVE-2023-31218
Cross-Site Request Forgery CSRF leading to Stored Cross-Site Scripting XSS vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.6 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF leading to Stored Cross-Site Scripting XSS vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.6 versions...
CVE-2023-31218
CVE-2023-31218 affects realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin (1.0.6 (1.0.7+). If you use this plugin, upgrade to 1.0.7 or later to mitigate risk. Technical details provided in connected entries confirm affected software and root cause; no additional exploit...
CVE-2023-31218 WordPress WOLF Plugin <= 1.0.6 is vulnerable to CSRF leading to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF leading to Stored Cross-Site Scripting XSS vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin = 1.0.6 versions...
WordPress plugin WOLF 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2023-38915
File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...
CVE-2023-38915
File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...
PT-2023-26685 · Wolf Leo · Wolf-Leo Easyadmin8
Name of the Vulnerable Software and Affected Versions: Wolf-leo EasyAdmin8 version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the upload type function. This is a result of a File Upload vulnerability in the software. Recommendations: For Wolf-leo EasyAdmin8...
CVE-2023-38915
File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...
CVE-2023-38915
The CVE-2023-38915 entry refers to Wolf-leo EasyAdmin8 v.1.0 with a File Upload vulnerability in the upload type function, enabling remote arbitrary code execution. Root cause is an unrestricted file upload pathway that allows attackers to execute code on the server. Affected product/version: Wol...
CVE-2023-38915
File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function...
UBUNTU-CVE-2023-3724
If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connecting to a malicious server, a default predictable buffer gets used for the IKM Input Keying Material value when generating the session master secret. Using a potentially known IKM value when...