22 matches found
WordPress Page Views Count <2.4.15 - SQL Injection
WordPress Page Views Count plugin prior to 2.4.15 contains an unauthenticated SQL injection vulnerability. It does not sanitise and escape the postids parameter before using it in a SQL statement via a REST endpoint. An attacker can possibly obtain sensitive information, modify data, and/or execu...
EUVD-2023-28037
Malicious code in bioql PyPI...
EUVD-2023-32700
Malicious code in bioql PyPI...
EUVD-2022-43449
Malicious code in bioql PyPI...
EUVD-2024-37521
Malicious code in bioql PyPI...
CVE-2023-32963: Missing Authorization
Missing Authorization vulnerability in a3rev Software WooCommerce Predictive Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Predictive Search: from n/a through 5.8.0...
CVE-2023-29097
Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...
Cross site scripting
Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...
CVE-2023-29097: Improper Neutralization of Input During Web Page Generation
Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...
CVE-2023-23973
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...
CVE-2023-23973
CVE-2023-23973 affects the WordPress plugin “a3rev Software Contact Us Page – Contact People” (versions <= 3.7.0). The root cause is a CSRF weakness that allows creation and potentially manipulation of contact entries because no CSRF protection is present (unauthenticated access described in P...
CVE-2023-23973
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...
CVE-2023-23973: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...
WordPress Plugin a3rev Software Contact Us Page – Contact People 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin a3rev Software...
CVE-2022-40131
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Page View Count plugin = 2.5.5 on WordPress allows an attacker to reset the plugin settings...
CVE-2022-40131
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Page View Count plugin = 2.5.5 on WordPress allows an attacker to reset the plugin settings...
CVE-2022-40131
The CVE-2022-40131 entry concerns the a3rev Software Page View Count plugin for WordPress, affected in versions
CVE-2022-40131
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Page View Count plugin = 2.5.5 on WordPress allows an attacker to reset the plugin settings...
PT-2022-25233 · A3Rev · A3Rev Software Page View Count Plugin
Name of the Vulnerable Software and Affected Versions: a3rev Software Page View Count plugin versions = 2.5.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to reset the plugin settings. Recommendations: For a3rev Software Page View...