WordPress Plugin Bootstrap Buttons: Cross-Site Script Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Bootstrap Buttons versions = 1.2...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (4.0.1), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (4.0.1) +32 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.28.1)

org.apache.struts:struts2-core MAVEN version 2.5.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin 4.0.1 -...

com.amazonaws.serverless:aws-serverless-java-container-struts (>=1.9, <=1.9.6), com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=4.0.2, <=5.0.3) +53 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (>=6.0.0, <=6.3.0.2)

org.apache.struts:struts2-core MAVEN version =6.0.0, =1.9, =4.0.2, =4.0.2, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =1.4.0, =1.4.1, =1.4.0, =1.4.3 and more Source cves: CVE-2024-53677 Source advisory: GHSA-43MQ-6...

com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin (2.0.0), com.amashchenko.struts2.pdfstream:struts2-pdfstream-showcase (2.0.0) +37 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5)

org.apache.struts:struts2-core MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin 2.0.0 -...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (1.7.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (1.7.0) +52 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.16)

org.apache.struts:struts2-core MAVEN version 2.3.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin 1.7.0 -...

com.amazonaws.serverless:aws-serverless-java-container-struts (>=1.9, <=1.9.6), com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=4.0.2, <=5.0.3) +53 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (>=6.0.0, <=6.3.0.2)

org.apache.struts:struts2-core MAVEN version =6.0.0, =1.9, =4.0.2, =4.0.2, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =1.4.0, =1.4.1, =1.4.0, =1.4.3 and more Source cves: CVE-2024-53677 Source advisory: OSV:GHSA-43...

CVE-2024-53824

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in allbootstrapblocks All Bootstrap Blocks all-bootstrap-blocks allows PHP Local File Inclusion.This issue affects All Bootstrap Blocks: from n/a through = 1.3.19...

CVE-2024-53824 WordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in allbootstrapblocks All Bootstrap Blocks all-bootstrap-blocks allows PHP Local File Inclusion.This issue affects All Bootstrap Blocks: from n/a through = 1.3.19...

CVE-2024-53824

CVE-2024-53824 – WordPress All Bootstrap Blocks plugin contains a Local File Inclusion due to improper filename handling in PHP include/require. Affected: All Bootstrap Blocks versions up to 1.3.19. Impact is high (CVE score 7.5, AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Remediation: patch to 1.3.20 ...

CVE-2024-53824: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in allbootstrapblocks All Bootstrap Blocks all-bootstrap-blocks allows PHP Local File Inclusion.This issue affects All Bootstrap Blocks: from n/a through = 1.3.19...

WordPress plugin “All Bootstrap Blocks” has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-35940

Name of the Vulnerable Software and Affected Versions: AREOI All Bootstrap Blocks versions 1.3.19 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP...

WordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin All Bootstrap Blocks versions = 1.3.19...

CVE-2024-11402 WordPress Block Editor Bootstrap Blocks plugin <= 6.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kubiq Block Editor Bootstrap Blocks block-editor-bootstrap-blocks allows Reflected XSS.This issue affects Block Editor Bootstrap Blocks: from n/a through = 6.6.1...

CVE-2024-11402 WordPress Block Editor Bootstrap Blocks plugin <= 6.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kubiq Block Editor Bootstrap Blocks block-editor-bootstrap-blocks allows Reflected XSS.This issue affects Block Editor Bootstrap Blocks: from n/a through = 6.6.1...

CVE-2024-11402

CVE-2024-11402 corresponds to WordPress Block Editor Bootstrap Blocks plugin (

PT-2024-16961 · WordPress · Wp-Speedup Block Editor Bootstrap Blocks

Name of the Vulnerable Software and Affected Versions: WP-speedup Block Editor Bootstrap Blocks versions through 6.6.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This lets an...

WordPress plugin Block Editor Bootstrap Blocks – Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

CVE-2024-11402: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kubiq Block Editor Bootstrap Blocks block-editor-bootstrap-blocks allows Reflected XSS.This issue affects Block Editor Bootstrap Blocks: from n/a through = 6.6.1...