123 matches found
CGA-VJX9-69QJ-P85C
Bulletin has no description...
CGA-RX2R-V9JQ-4P74
Bulletin has no description...
CGA-MVH6-3MGC-HQ8W
Bulletin has no description...
CGA-MG75-RW8R-52JJ
Bulletin has no description...
CGA-M3FR-Q79H-CXQV
Bulletin has no description...
CGA-CG9P-G22H-484F
Bulletin has no description...
CGA-9VQ4-4632-2R89
Bulletin has no description...
CGA-4WMP-6W9C-3V8Q
Bulletin has no description...
CGA-4QH5-C7FR-956H
Bulletin has no description...
CVE-2024-5149
The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of an insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification...
PT-2024-34664 · WordPress · Login With Phone Number
Name of the Vulnerable Software and Affected Versions: Login with phone number plugin for WordPress versions up to 1.7.26 Description: The issue is related to authentication bypass due to the activation code default value being empty and a missing not empty check in the lwp ajax register function...
Customer Email Verification for WooCommerce < 2.7.5 - Authentication Bypass
Description The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to...
CVE-2024-4185
The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the...
CVE-2024-4185 Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness
The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the...
CVE-2024-4185
The Customer Email Verification for WooCommerce plugin for WordPress (emails-verification-for-woocommerce) contains an Email Verification and Authentication Bypass in all versions up to 2.7.4 due to insufficiently random activation codes. This allows unauthenticated attackers to bypass email veri...
WordPress plugin Customer Email Verification for WooCommerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
PT-2024-29596 · WordPress · Customer Email Verification For Woocommerce
Name of the Vulnerable Software and Affected Versions: Customer Email Verification for WooCommerce plugin for WordPress versions up to 2.7.4 Description: The issue concerns the Customer Email Verification for WooCommerce plugin for WordPress, which is vulnerable to email verification and...
CVE-2022-2515
The Simple Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the proversionactivationcode parameter in versions up to, and including, 2.11.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, including those...
CVE-2022-2515
The Simple Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the proversionactivationcode parameter in versions up to, and including, 2.11.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, including those...
PT-2022-17101 · WordPress · Simple Banner
Name of the Vulnerable Software and Affected Versions: Simple Banner plugin for WordPress versions up to and including 2.11.0 Description: The issue arises from insufficient input sanitization and output escaping, allowing authenticated attackers to inject arbitrary web scripts via the pro versio...