70 matches found
Wordpress Simple Sitemap plugin <= 3.5.13 - Cross-Site Request Forgery via admin_notices vulnerability
Cross-Site Request Forgery via adminnotices vulnerability discovered by Rafshanzani Suhada in WordPress Plugin Simple Sitemap – Create a Responsive HTML Sitemap versions = 3.5.13...
Simple Sitemap < 3.5.14 - Cross-Site Request Forgery via admin_notices
Description The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.13. This is due to missing or incorrect nonce validation in the 'adminnotices' hook found in class-settings.php. This makes ...
CVE-2024-1717 Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
The Admin Notices Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handleajaxcall function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to...
CVE-2024-1717 Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
The Admin Notices Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handleajaxcall function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to...
WordPress Admin Notices Manager plugin <= 1.4.0 - Missing Authorization to Authenticated User Email Retrieval vulnerability
Missing Authorization to Authenticated User Email Retrieval vulnerability discovered by Lucio Sá in WordPress Plugin Admin Notices Manager versions = 1.4.0...
WordPress Admin Notices Manager Plugin <= 1.4.0 is vulnerable to Broken Access Control
Software Admin Notices Manager Type Plugin Vulnerable versions = 1.4.0 Fixed in 1.5.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1717 Patch priority Low CVSS severity Low 4.3 Developer Melapress PSID 95224798df4d Credits Lucio Sá Required privilege...
wpDiscuz < 7.6.12 - Cross-Site Request Forgery
Description The wpDiscuz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.6.11. This is due to missing or incorrect nonce validation on one of its functions. This makes it possible for unauthenticated attackers to dismiss admin notices via a...
CVE-2023-41672
Cross-Site Request Forgery CSRF vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin = 2.3.2 versions...
CVE-2023-41672
Cross-Site Request Forgery CSRF vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin = 2.3.2 versions...
CVE-2023-41672
CVE-2023-41672 relates to a CSRF vulnerability in the WordPress plugin Hide admin notices – Admin Notification Center (
WordPress Plugin Hide admin notices - Admin Notification Center Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Hide admin notices - Admin Notification...
WordPress Ant Admin Notices for Team Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)
Software Ant Admin Notices for Team Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2410afb1f6ab Credits Rafie Muhammad Patchsta...
WordPress plugin view-all-posts-pages 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Ant Admin Notices for Team plugin <= 1.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ant Admin Notices for Team plugin versions = 1.0.4. Solution No patched version available...
WordPress Ant Admin Notices for Team plugin <= 1.0.4 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Ant Admin Notices for Team plugin versions = 1.0.4. Solution No patched version available...
The vulnerability of the ~/admin/class-kjm-admin-notices-admin.php component of the KJM Admin Notices plugin for WordPress content management system allows a hacker to perform cross-site scripting attacks.
The vulnerability of the /admin/class-kjm-admin-notices-admin.php component of the KJM Admin Notices plugin for WordPress management systems of WordPress websites is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious act...
CVE-2021-39344
The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin/class-kjm-admin-notices-admin.php file which allowed attackers with administrative user access to inject arbitrary w...
CVE-2021-39344
The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin/class-kjm-admin-notices-admin.php file which allowed attackers with administrative user access to inject arbitrary w...
Cross site scripting
The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin/class-kjm-admin-notices-admin.php file which allowed attackers with administrative user access to inject arbitrary w...