610 matches found
CVE-2021-34646
CVE-2021-34646 PoC detalhe desta vulnerabilidade pelo NVD Versões até a 5.4.3, inclusive, do plugin Booster for WooCommerce para WordPress são vulneráveis a bypass de autenticação através da função processemailverification devido a uma fraqueza na geração de token aleatório na função...
booster
Booster - initramfs veloce, sicuro e moderno per Linux Booster rende l'avvio iniziale più leggero, veloce e affidabile. Costruisce immagini initramfs compatte che portano il tuo sistema Linux dal firmware al filesystem root reale con il minimo sforzo e un forte supporto per l'avvio crittografato...
CVE-2021-34646
CVE-2021-34646 PoC per CVE-2021-34646 Titolo Exploit: WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Bypass dell'autenticazione Data: 2021-09-16 Autore Exploit: Sebastian Kriesten 0xB455 Contatto: https://twitter.com/0xB455 Plugin interessato: Booster for WooCommerce Slug del plugin:...
10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion
The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service. id: CVE-2023-5559 info: name: 10Web Booster 2.24.18 - Unauthenticated Arbitra...
CVE-2026-14287
The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as...
CVE-2026-14287
The 10Web Booster WordPress plugin (versions before 2.33.5 ) is vulnerable to unauthenticated Stored XSS via Critical CSS Token Bypass . The root cause is a combination of insufficient access token validation on an unauthenticated request handler and failure to escape attacker-supplied stylesheet...
EUVD-2026-62263
The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as...
CVE-2026-74004
Subscriber Broken Access Control in Gravity Booster Styles & Layouts for Gravity Forms = 6.0 versions...
EUVD-2026-60813
Subscriber Broken Access Control in Gravity Booster Styles & Layouts for Gravity Forms = 6.0 versions...
CVE-2026-74004 WordPress Gravity Booster – Styles & Layouts for Gravity Forms plugin <= 6.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Gravity Booster Styles & Layouts for Gravity Forms = 6.0 versions...
CVE-2026-74004
The WordPress plugin "Gravity Booster – Styles & Layouts for Gravity Forms" (versions ≤ 6.0) has a broken access control flaw exploitable by authenticated subscribers, allowing unauthorized access to plugin functions. CVSS 3.1 score is 5.4 (MEDIUM) with network attack vector, low privileges requi...
WordPress Gravity Booster – Styles & Layouts for Gravity Forms plugin <= 6.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Gravity Booster Styles & Layouts for Gravity Forms versions = 6.1...
CVE-2026-12477
The Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
EUVD-2026-59856
The Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2026-12477 Gravity Booster <= 5.26 - Authenticated (Editor+) Stored Cross-Site Scripting via 'stylerSettings' Parameter
The Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2026-12477
The Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2026-12477
The CVE-2026-12477 entry concerns the Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress. A Stored Cross‑Site Scripting (XSS) flaw exists in admin settings across all versions up to and including 5.26, caused by insufficient input sanitization and output escaping. The vulne...
PT-2026-73081
The Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2026-15411
The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0. This is due to the plugin not properly verifying that a user is authorized to perfor...
CVE-2026-13110
The Storegrowth Sales Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 2.1.0. This is due to a missing capability check on the bogocategorymsgcreate AJAX handler, which is registered for both authenticated wpajax and unauthenticated wpajaxnopriv...