443 matches found
WordPress profile-builder plugin cross-site scripting vulnerability (CNVD-2019-32396)
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress profile-builder plugin. An attacker can exploit...
CVE-2015-9337
The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX...
CVE-2016-10911
The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues...
Cross site scripting
The profile-builder plugin before 2.2.5 for WordPress has XSS...
CVE-2015-9328
CVE-2015-9328 affects the WordPress community plugin Profile Builder (WordPress plugin) prior to version 2.2.5 . The vulnerability is a cross-site scripting (XSS) flaw in the plugin, enabling an attacker to inject and execute client-side code. Multiple sources corroborate the issue as an XSS in t...
CVE-2015-9328
The profile-builder plugin before 2.2.5 for WordPress has XSS...
CVE-2014-10380
The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms...
PT-2019-7287
Name of the Vulnerable Software and Affected Versions WordPress profile-builder plugin versions prior to 2.2.5 Description The issue affects the profile-builder plugin for WordPress, allowing for XSS attacks. Recommendations For versions prior to 2.2.5, update the profile-builder plugin to versio...
PT-2019-7056
Name of the Vulnerable Software and Affected Versions profile-builder plugin versions prior to 1.1.66 for WordPress Description The issue concerns multiple XSS problems in forms within the plugin. Recommendations For versions prior to 1.1.66, update to version 1.1.66 or later to resolve the issue...
CVE-2018-1000186
A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another...
CVE-2018-1000186
A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another...
CVE-2018-1000186
A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another...
CVE-2018-1000186: Exposure of Sensitive Information to an Unauthorized Actor
A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another...
PT-2018-9355
Name of the Vulnerable Software and Affected Versions Jenkins GitHub Pull Request Builder Plugin versions 1.41.0 and older Description A sensitive information exposure issue exists, allowing attackers with Overall/Read access to connect to a specified URL using attacker-specified credentials IDs,...
CVE-2018-1000143
An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials...
CVE-2018-1000142
An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials...
CVE-2018-1000143
An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials...
PT-2018-9314
Name of the Vulnerable Software and Affected Versions Jenkins GitHub Pull Request Builder Plugin versions 1.39.0 and older Description An exposure of sensitive information issue exists in the Jenkins GitHub Pull Request Builder Plugin that allows an attacker with local file system access to obtai...
CVE-2018-1000142: Exposure of Sensitive Information to an Unauthorized Actor
An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials...
PT-2018-9315
Name of the Vulnerable Software and Affected Versions Jenkins GitHub Pull Request Builder Plugin versions 1.39.0 and older Jenkins GitHub Pull Request Builder Plugin versions prior to 1.32.1 Description A sensitive information exposure issue exists, allowing an attacker with local file system...