WordPress Plugin Responsive Column Widgets Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Dashboard Widgets Suite Type Plugin Vulnerable versions = 3.4.1 Fixed in 3.4.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49743 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c6ab0c656b0c Credits Rachit Arora Required privileg...

WordPress SiteOrigin Widgets Bundle Plugin <= 1.50.1 is vulnerable to Local File Inclusion

Software SiteOrigin Widgets Bundle Type Plugin Vulnerable versions = 1.50.1 Fixed in 1.51.0 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-6295 Patch priority Low CVSS severity Low 7.4 Developer Claim ownership PSID d65c4e36bd60 Credits Sebastian Neef Required privile...

WordPress Widgets for Thumbtack Reviews Plugin <= 11.0.2 is vulnerable to Arbitrary File Upload

Software Widgets for Thumbtack Reviews Type Plugin Vulnerable versions = 11.0.2 Fixed in 11.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-48275 Patch priority Medium CVSS severity Medium 8 Developer Claim ownership PSID 2ce34d06b354 Credits Rafie Muhammad Patchsta...

WordPress Widgets for Alibaba Reviews Plugin <= 11.0.2 is vulnerable to Arbitrary File Upload

Software Widgets for Alibaba Reviews Type Plugin Vulnerable versions = 11.0.2 Fixed in 11.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-48275 Patch priority Medium CVSS severity Medium 8 Developer Claim ownership PSID f6196cc9a5d5 Credits Rafie Muhammad Patchstack...

WordPress Widgets for Yelp Reviews Plugin <= 11.0.2 is vulnerable to Arbitrary File Upload

Software Widgets for Yelp Reviews Type Plugin Vulnerable versions = 11.0.2 Fixed in 11.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-48275 Patch priority Medium CVSS severity Medium 8 Developer Claim ownership PSID 323b86ec1718 Credits Rafie Muhammad Patchstack...

WordPress Widgets for Árukereső Reviews Plugin <= 11.0.2 is vulnerable to Arbitrary File Upload

Software Widgets for Árukereső Reviews Type Plugin Vulnerable versions = 11.0.2 Fixed in 11.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-48275 Patch priority Medium CVSS severity Medium 8 Developer Claim ownership PSID 0e28953b2be2 Credits Rafie Muhammad Patchsta...

WordPress Widgets for Airbnb Reviews Plugin <= 11.0.2 is vulnerable to Arbitrary File Upload

Software Widgets for Airbnb Reviews Type Plugin Vulnerable versions = 11.0.2 Fixed in 11.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-48275 Patch priority Medium CVSS severity Medium 8 Developer Claim ownership PSID 17c7b7de54d5 Credits Rafie Muhammad Patchstack...

so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion

Description The plugin does not validate user input before using it to generate paths passed to include function/s, allowing users with the administrator role to perform LFI attacks in the context of Multisite WordPress sites. 1. Create a multi-site wordpress setup, i.e. using docker-containers,...

Responsive Column Widgets <= 1.2.7 - Open Redirect via responsive_column_widgets_link

Description The Responsive Column Widgets plugin for WordPress is vulnerable to Open Redirect in versions up to, and including, 1.2.7. This is due to insufficient validation on the redirect url supplied via the responsivecolumnwidgetslink parameter. This makes it possible for unauthenticated...

CVE-2023-47808

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christina Uechi Add Widgets to Page plugin = 1.3.2 versions...

CVE-2023-47808

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christina Uechi Add Widgets to Page plugin = 1.3.2 versions...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christina Uechi Add Widgets to Page plugin = 1.3.2 versions...

CVE-2023-47808 WordPress Add Widgets to Page Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christina Uechi Add Widgets to Page plugin = 1.3.2 versions...

CVE-2023-47808

CVE-2023-47808 corresponds to the WordPress Add Widgets to Page plugin vulnerability (

CVE-2023-47765

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

CVE-2023-47765

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

CVE-2023-47765 WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

CVE-2023-47765

CVE-2023-47765: Cross-Site Request Forgery in CodeBard’s Patron Button and Widgets for Patreon plugin (WordPress) &lt;= 2.1.9. Root cause: missing nonce validation enabling CSRF with unauthenticated attackers to forge actions. Affected versions:

WordPress Plugin CodeBard s Patron Button and Widgets for Patreon Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin CodeBard s...