12980 matches found
WordPress Beaver Builder plugin <= 2.8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via type Parameter vulnerability discovered by zer0gh0st in WordPress Plugin Beaver Builder versions = 2.8.3.5...
WordPress Funnel Kit Funnel Builder PRO plugin <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post vulnerability
WordPress Funnel Kit Funnel Builder PRO plugin = 3.4.5 AuthenticatedContributor+ Stored Cross-Site Scripting via allowiframetaginpost vulnerability discovered by Francesco Carlucci in WordPress Plugin Funnel Kit Funnel Builder PRO versions = 3.4.5...
WordPress plugin Funnel Kit Funnel Builder PRO 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress Beaver Builder Plugin <= 2.8.3.5 is vulnerable to Cross Site Scripting (XSS)
Software Beaver Builder Type Plugin Vulnerable versions = 2.8.3.5 Fixed in 2.8.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7895 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 249291af5e88 Credits zer0gh0st Required...
WordPress plugin Cost Calculator Builder SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
WordPress plugin Page Builder Gutenberg Blocks 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2024-38666 · WordPress · Beaver Builder
Name of the Vulnerable Software and Affected Versions: Beaver Builder – WordPress Page Builder versions up to, and including, 2.8.3.5 Description: The issue is related to Stored Cross-Site Scripting via the type parameter due to insufficient input sanitization and output escaping. This allows...
WordPress plugin Beaver Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
PT-2024-30815 · WordPress · Classic Addons – Wpbakery Page Builder
Name of the Vulnerable Software and Affected Versions: Classic Addons – WPBakery Page Builder versions prior to 3.0 Description: The issue is related to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS vulnerability, specifically Stored XSS. This...
WordPress plugin Beaver Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
PT-2024-20924 · WordPress · Popup Builder
Name of the Vulnerable Software and Affected Versions: Popup Builder plugin for WordPress versions up to, and including, 4.3.3 Description: The issue is a Sensitive Information Exposure vulnerability in the Popup Builder plugin for WordPress, specifically via the Subscribers Import feature. This...
WordPress plugin Web and WooCommerce Addons for WPBakery Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
WordPress plugin SKT Blocks – Gutenberg based Page Builder 跨站脚本漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin SKT Blocks - Gutenbe...
PT-2024-30822 · Unknown · Page Builder Addons Web +1
Name of the Vulnerable Software and Affected Versions: Page Builder Addons Web and WooCommerce Addons for WPBakery Builder versions 1.4.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which...
PT-2024-30787 · Unknown · Beaver Builder
Name of the Vulnerable Software and Affected Versions: Beaver Builder versions 2.8.3.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions...
WordPress Funnel Kit Funnel Builder PRO Plugin <= 3.4.5 is vulnerable to Cross Site Scripting (XSS)
Software Funnel Kit Funnel Builder PRO Type Plugin Vulnerable versions = 3.4.5 Fixed in 3.5.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1056 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8c1faa8fa285 Credits Francesco...
WordPress Popup Builder Plugin <= 4.3.4 is vulnerable to Sensitive Data Exposure
Software Popup Builder Type Plugin Vulnerable versions = 4.3.4 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2541 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 6c83b1e3c00b Credits Tim Coen Required privilege...
WordPress plugin Classic Addons – WPBakery Page Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...
WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Michael Patchstack Alliance in WordPress Plugin The Plus Addons for Elementor Page Builder Lite versions = 5.6.2...
