10 matches found
CVE-2026-31799
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. From version 2.14.2 to before version 2.17.0 for parameters "before" and "after" and from version 2.1.0-beta to before version 2.17.0 for parameters "sectionid" and "userid", the /api/v2?cmd=gethomestats endpoint passe...
EUVD-2024-29906
Malicious code in bioql PyPI...
CVE-2024-32084
Cross-Site Request Forgery CSRF vulnerability in Gold Plugins Before And After.This issue affects Before And After: from n/a through 3.9...
CVE-2025-47549: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Themefic BEAF beaf-before-and-after-gallery allows Upload a Web Shell to a Web Server.This issue affects BEAF: from n/a through = 4.6.10...
CVE-2024-8543: Improper Neutralization of Input During Web Page Generation
The Slider comparison image before and after plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sciba shortcode in all versions up to, and including, 0.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...
CVE-2024-32084
Cross-Site Request Forgery CSRF vulnerability in Gold Plugins Before And After.This issue affects Before And After: from n/a through 3.9...
CVE-2024-32084: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Gold Plugins Before And After.This issue affects Before And After: from n/a through 3.9...
CVE-2024-32433: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Themefic BEAF beaf-before-and-after-gallery.This issue affects BEAF: from n/a through = 4.5.4...
WordPress Before And After plugin <= 3.9 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Before And After versions = 3.9...
WordPress Before And After Plugin <= 3.9 is vulnerable to Cross Site Request Forgery (CSRF)
Software Before And After Type Plugin Vulnerable versions = 3.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32084 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a1fae8061eac Credits Dhabaleshwar Das...