6599 matches found
WordPress Blocks Bakery – Gutenberg Blocks Plugin <= 1.0.12 is vulnerable to Cross Site Scripting (XSS)
Software Blocks Bakery – Gutenberg Blocks Type Plugin Vulnerable versions = 1.0.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4de5fd74e476 Credits Rafie Muhammad...
WordPress Cozy Blocks Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)
Software Cozy Blocks Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer CozyThemes PSID 5480a1de59c0 Credits Rafie Muhammad Patchstack Required...
WordPress Extreme Blocks Plugin <= 0.8.1 is vulnerable to Cross Site Scripting (XSS)
Software Extreme Blocks Type Plugin Vulnerable versions = 0.8.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 084f10a70314 Credits Rafie Muhammad Patchstack Required...
WordPress B Blocks - The ultimate block collection Plugin < 1.7.8 is vulnerable to Cross Site Scripting (XSS)
Software B Blocks - The ultimate block collection Type Plugin Vulnerable versions 1.7.8 Fixed in 1.7.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a29938020aa Credits Rafie...
WordPress Gutenberg Blocks – ACF Blocks Suite Plugin < 2.6.10 is vulnerable to Cross Site Scripting (XSS)
Software Gutenberg Blocks – ACF Blocks Suite Type Plugin Vulnerable versions 2.6.10 Fixed in 2.6.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e64ba14a6800 Credits Rafie Muhamm...
WordPress One Page Blocks Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software One Page Blocks Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 260976c0490e Credits Rafie Muhammad Patchstack Required...
WordPress Convert Classic Editor to Gutenberg Blocks Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)
Software Convert Classic Editor to Gutenberg Blocks Type Plugin Vulnerable versions = 1.0.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5e43f482848c Credits Rafie...
Design/Logic Flaw
mx-chain-go is the official implementation of the MultiversX blockchain protocol, written in golang. When executing a relayed transaction, if the inner transaction failed, it would have increased the inner transaction's sender account nonce. This could have contributed to a limited DoS attack on ...
CVE-2023-35047
Cross-Site Request Forgery CSRF vulnerability in AREOI All Bootstrap Blocks plugin = 1.3.6 versions...
CVE-2023-35047
Cross-Site Request Forgery CSRF vulnerability in AREOI All Bootstrap Blocks plugin = 1.3.6 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in AREOI All Bootstrap Blocks plugin = 1.3.6 versions...
CVE-2023-35047 WordPress All Bootstrap Blocks Plugin <= 1.3.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in AREOI All Bootstrap Blocks plugin = 1.3.6 versions...
CVE-2023-35047 WordPress All Bootstrap Blocks Plugin <= 1.3.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in AREOI All Bootstrap Blocks plugin = 1.3.6 versions...
CVE-2023-35047
CVE-2023-35047 : Cross-Site Request Forgery in the WordPress plugin All Bootstrap Blocks (AREOI)
WordPress Plugin All Bootstrap Blocks 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2023-25114
Name of the Vulnerable Software and Affected Versions AREOI All Bootstrap Blocks plugin versions = 1.3.6 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
CVE-2023-35047: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in AREOI All Bootstrap Blocks plugin = 1.3.6 versions...
FreeBSD : mediawiki -- multiple vulnerabilities (95dad123-180e-11ee-86ba-080027eda32c)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 95dad123-180e-11ee-86ba-080027eda32c advisory. - guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are...
Design/Logic Flaw
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain situations, an attempt to block a user fails after a temporary browser hang and a DBQueryDisconnectedError error message...
pypdf 安全漏洞
PyPDF2 is a free open source pure python PDF library . Able to split, merge, crop and convert pages of PDF files. pypdf 1.27.9 previous version of a security vulnerability , the vulnerability stems from the attacker can make PDF lead to unexpected long run , will block the process...