CVE-2024-3743: Improper Neutralization of Input During Web Page Generation

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group, Shape Separator, Content Switcher, Info Circle and Timeline widgets in all versions up to, and including, 1.13.3 due to insufficient input sanitization and output escaping. Th...

WordPress plugin Elementor Addon Elements 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-13428

Name of the Vulnerable Software and Affected Versions Media Streaming add-on versions prior to 500.1.1.5 Description An OS command injection issue has been reported, affecting the Media Streaming add-on. This could allow authenticated administrators to execute commands via a network. The issue is...

CVE-2024-3936: Missing Authorization

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtTPGSaveSettings function in all versions up to, and including, 7.6.1. This makes it possible for...

The vulnerability of the cfdb7_before_send_mail() function in the Contact Form 7 Database Addon (CFDB7), a content management system for WordPress websites. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of the cfdb7beforesendmail function in the Contact Form 7 Database Addon CFDB7, a content management system for WordPress, is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

WordPress Elementor Addon Elements plugin <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin Elementor Addon Elements versions = 1.13.3...

WordPress Qi Addons For Elementor plugin <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Countdown widget vulnerability discovered by Webbernaut in WordPress Plugin Qi Addons For Elementor versions = 1.7.0...

WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Tim Coen in WordPress Plugin Contact Form 7 Database Addon – CFDB7 versions = 1.2.6.8...

WordPress Contact Form 7 Database Addon – CFDB7 Plugin <= 1.2.6.8 is vulnerable to Sensitive Data Exposure

Software Contact Form 7 Database Addon – CFDB7 Type Plugin Vulnerable versions = 1.2.6.8 Fixed in 1.2.7 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-3870 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b218289620d7 Credits Ti...

WordPress Elementor Addon Elements Plugin <= 1.13.3 is vulnerable to Cross Site Scripting (XSS)

Software Elementor Addon Elements Type Plugin Vulnerable versions = 1.13.3 Fixed in 1.13.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3743 Patch priority Low CVSS severity Low 6.5 Developer WPVibes PSID c27b5681f16b Credits stealthcopter Require...

Media Streaming add-on 安全漏洞

Media Streaming add-on is a media streaming add-on. A security vulnerability exists in Media Streaming Add-on version 500.1.x, which stems from a sensitive information disclosure vulnerability...

WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on Duplicate Post vulnerability

Broken Access Control on Duplicate Post vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Master Addons for Elementor versions = 2.0.5.4.1...

CVE-2024-32432

Missing Authorization vulnerability in Ovic Team Ovic Addon Toolkit.This issue affects Ovic Addon Toolkit: from n/a through 2.6.1...

CVE-2024-32432 WordPress Ovic Addon Toolkit plugin <= 2.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ovic Team Ovic Addon Toolkit.This issue affects Ovic Addon Toolkit: from n/a through 2.6.1...

CVE-2024-32432 WordPress Ovic Addon Toolkit plugin <= 2.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ovic Team Ovic Addon Toolkit.This issue affects Ovic Addon Toolkit: from n/a through 2.6.1...

WordPress plugin Ovic Addon Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-32432: Missing Authorization

Missing Authorization vulnerability in Ovic Team Ovic Addon Toolkit.This issue affects Ovic Addon Toolkit: from n/a through 2.6.1...

PT-2024-24562

Name of the Vulnerable Software and Affected Versions Ovic Addon Toolkit versions 2.6.1 and earlier Description The issue is related to a Missing Authorization vulnerability in the Ovic Team Ovic Addon Toolkit. Recommendations For Ovic Addon Toolkit versions 2.6.1 and earlier, update to a version...

PT-2024-24180

Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description An issue in the software allows a remote attacker to execute arbitrary code via a crafted script to the "edit addon post.php" component. Recommendations For version 2.33, consider disabling access to the...

flusity CMS 安全漏洞

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v.2.33, which originated from a vulnerability that allows remote attackers to execute arbitrary code by constructing the editaddonpost.php script...