PT-2022-25537 · WordPress · Ip Location Block Plugin

Name of the Vulnerable Software and Affected Versions: IP Location Block Plugin affected versions not specified Description: A vulnerability was found in the IP Location Block Plugin, affecting an unknown functionality of the component HTTP Header Handler. The manipulation of the X-Forwarded-For...

DRUPAL-CONTRIB-2022-044

Entity Browser Block provides a Block Plugin for every Entity Browser on your site. The module didn't sufficiently check entity view access in the block form. This vulnerability is mitigated by the fact that an attacker must be able to place a block - either through the core "Block Layout" page o...

Entity Browser Block - Moderately critical - Access bypass - SA-CONTRIB-2022-044

Entity Browser Block provides a Block Plugin for every Entity Browser on your site. The module didn't sufficiently check entity view access in the block form. This vulnerability is mitigated by the fact that an attacker must be able to place a block - either through the core "Block Layout" page o...

CVE-2021-43557

The uri-block plugin in Apache APISIX before 2.10.2 uses $requesturi without verification. The $requesturi is the full original request URI without normalization. This makes it possible to construct a URI to bypass the block list on some occasions. For instance, when the block list contains...

CVE-2021-43557

The uri-block plugin in Apache APISIX before 2.10.2 uses $requesturi without verification. The $requesturi is the full original request URI without normalization. This makes it possible to construct a URI to bypass the block list on some occasions. For instance, when the block list contains...

Authentication flaw

The uri-block plugin in Apache APISIX before 2.10.2 uses $requesturi without verification. The $requesturi is the full original request URI without normalization. This makes it possible to construct a URI to bypass the block list on some occasions. For instance, when the block list contains...

CVE-2021-43557 Path traversal in request_uri variable

The uri-block plugin in Apache APISIX before 2.10.2 uses $requesturi without verification. The $requesturi is the full original request URI without normalization. This makes it possible to construct a URI to bypass the block list on some occasions. For instance, when the block list contains...

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin WP Map Block, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability to execute...

WordPress Countdown Block plugin <= 1.1.1 - Missing Authorisation in AJAX action vulnerability

Missing Authorisation in AJAX action vulnerability discovered by apple502j in WordPress Countdown Block plugin versions = 1.1.1. Solution Update the WordPress Countdown Block plugin to the latest available version at least 1.1.2...

WordPress WP Map Block plugin <= 1.2.2 - Stored Cross-Site Scripting (XSS) vulnerabilities

Stored Cross-Site Scripting XSS vulnerabilities discovered by apple502j in WordPress WP Map Block plugin versions = 1.2.2. Solution Update the WordPress WP Map Block plugin to the latest available version at least 1.2.3...

CVE-2019-15536

The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via deleterecords...

CVE-2019-15536

The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via deleterecords...

Sql injection

The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via deleterecords...

CVE-2019-15536

The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via deleterecords...

CVE-2019-15536

CVE-2019-15536 affects the Moodle Acclaim block plugin prior to 2019-06-26, enabling SQL injection via delete_records. Documents indicate a network-exposed, high-severity flaw (CVSS3: CRITICAL, 9.8) with no authentication and no required user interaction, allowing execution of arbitrary SQL comma...