52 matches found
CVE-2024-30469
Technical details for CVE-2024-30469 are not publicly available in the provided documents. Monitor for official updates and vendor advisories for affected products and remediation steps.
WordPress Post SMTP Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)
Software Post SMTP Type Plugin Vulnerable versions = 2.8.6 Fixed in 2.8.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29128 Patch priority Medium CVSS severity Medium 7.1 Developer WPExperts PSID d4415453cdb3 Credits Le Ngoc Anh Required privilege Unauthenticat...
Exploit for Missing Authorization in Wpexperts Post_Smtp
CVE-2023-6875 Exploit for PostSMTP - Unauthorized Account...
WordPress Post SMTP Plugin <= 2.8.7 is vulnerable to Cross Site Scripting (XSS)
Software Post SMTP Type Plugin Vulnerable versions = 2.8.7 Fixed in 2.8.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-7027 Patch priority Medium CVSS severity Medium 7.1 Developer WPExperts PSID 7142ca21bf69 Credits Sean Murphy Required privilege...
WordPress Post SMTP Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)
Software Post SMTP Type Plugin Vulnerable versions = 2.8.6 Fixed in 2.8.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6629 Patch priority Medium CVSS severity Medium 7.1 Developer WPExperts PSID 5ffadd1b9885 Credits Matan Berson matanber Required...
WordPress Post SMTP Plugin < 2.5.8 is vulnerable to Cross Site Scripting (XSS)
Software Post SMTP Type Plugin Vulnerable versions 2.5.8 Fixed in 2.5.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer WPExperts PSID d7157e1c149c Credits Rafie Muhammad Patchstack Required privilege...
WordPress Post SMTP Plugin <= 2.5.7 is vulnerable to Cross Site Scripting (XSS)
Software Post SMTP Type Plugin Vulnerable versions = 2.5.7 Fixed in 2.5.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3082 Patch priority Low CVSS severity Low 7.1 Developer WPExperts PSID c8d98d03e5dd Credits Alex Thomas Required privilege...
CVE-2023-32580
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPExperts Password Protected plugin = 2.6.2 versions...
CVE-2023-32580
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPExperts Password Protected plugin = 2.6.2 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPExperts Password Protected plugin = 2.6.2 versions...
CVE-2023-32580 WordPress Password Protected Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPExperts Password Protected plugin = 2.6.2 versions...
CVE-2023-32580
CVE-2023-32580 affects the WordPress plugin “Password Protected” (WPExperts) ≤ 2.6.2. The issue is an authenticated (admin+) Stored Cross‑Site Scripting (XSS) vulnerability, enabling script injection via the plugin’s handling of input when already logged in as an administrator. Multiple sources c...