WordPress Elementor Header & Footer Builder plugin <= 1.6.43 - Authenticated (Contributor+) Information Disclosure vulnerability

Authenticated Contributor+ Information Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.43...

DEBIAN-CVE-2024-50000

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5etirbuilderalloc In mlx5etirbuilderalloc kvzalloc may return NULL which is dereferenced on the next line in a reference to the modify field. Found by Linux Verification Center linuxtesting.org wit...

UBUNTU-CVE-2024-50000

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5etirbuilderalloc In mlx5etirbuilderalloc kvzalloc may return NULL which is dereferenced on the next line in a reference to the modify field. Found by Linux Verification Center linuxtesting.org wit...

CVE-2024-49325

Subscriber Broken Access Control in Photo Gallery Builder = 3.0 versions...

CVE-2024-49325 WordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerability

Missing Authorization vulnerability in wpdiscover Photo Gallery Builder photo-gallery-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Photo Gallery Builder: from n/a through = 3.0...

CVE-2024-49325

CVE-2024-49325 affects WordPress Photo Gallery Builder plugin (versions

CVE-2024-49325 WordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerability

Subscriber Broken Access Control in Photo Gallery Builder = 3.0 versions...

CVE-2024-48049

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mighty Plugins Mighty Builder allows Stored XSS.This issue affects Mighty Builder: from n/a through 1.0.2...

CVE-2024-48049 WordPress Mighty Builder plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mighty Plugins Mighty Builder mighty-builder allows Stored XSS.This issue affects Mighty Builder: from n/a through = 1.0.2...

CVE-2024-48049

CVE-2024-48049 is a Stored XSS in Mighty Builder (WordPress) plugin up to version 1.0.2 caused by improper input neutralization during web page generation. The vulnerability affects Mighty Builder and can store malicious scripts on affected sites. Security ratings in the documents show a low over...

CVE-2024-48049 WordPress Mighty Builder plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mighty Plugins Mighty Builder mighty-builder allows Stored XSS.This issue affects Mighty Builder: from n/a through = 1.0.2...

PT-2024-32968 · Unknown · Mighty Builder

Name of the Vulnerable Software and Affected Versions: Mighty Builder versions 1.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, which leads to a Stored XSS vulnerability. This allows for Cross-site Scripting, where an attacker can...

WordPress plugin Photo Gallery Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2024-33466 · Unknown · Photo Gallery Builder

Name of the Vulnerable Software and Affected Versions: Photo Gallery Builder versions 3.0 and earlier Description: The issue is related to a broken access control for subscribers in Photo Gallery Builder. This allows unauthorized access, potentially leading to data breaches or other security...

WordPress plugin Mighty Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Malicious code in capi-param-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4506a65382f9502c37e84c02f2a48ef665a903470e3c981ab60a5c8ef9f6d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9438 Malicious code in capi-param-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4506a65382f9502c37e84c02f2a48ef665a903470e3c981ab60a5c8ef9f6d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-49225

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in swebdeveloper wpPricing Builder wppricing-builder-lite-responsive-pricing-table-builder allows Stored XSS.This issue affects wpPricing Builder: from n/a through = 1.5.0...

CVE-2024-49225

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Swebdeveloper wpPricing Builder allows Stored XSS.This issue affects wpPricing Builder: from n/a through 1.5.0...

CVE-2024-49225 WordPress wpPricing Builder plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in swebdeveloper wpPricing Builder wppricing-builder-lite-responsive-pricing-table-builder allows Stored XSS.This issue affects wpPricing Builder: from n/a through = 1.5.0...