12985 matches found
WordPress tagDiv Opt-In Builder Plugin <= 1.4.4 is vulnerable to SQL Injection
Software tagDiv Opt-In Builder Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-3416 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 3ce3fb181adf Credits Truoc Phan Required privilege Administrator...
CVE-2024-43291
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder allows Stored XSS.This issue affects Void Contact Form 7 Widget For Elementor Page Builder: from n/a through 2.4.1...
CVE-2024-43291
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder allows Stored XSS.This issue affects Void Contact Form 7 Widget For Elementor Page Builder: from n/a through 2.4.1...
CVE-2024-43291 WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder allows Stored XSS.This issue affects Void Contact Form 7 Widget For Elementor Page Builder: from n/a through 2.4.1...
CVE-2024-43291
CVE-2024-43291 affects Void Contact Form 7 Widget For Elementor Page Builder. Vulnerability: improper input neutralization during web page generation enabling Stored XSS in the plugin. Affected: Void Contact Form 7 Widget For Elementor Page Builder from n/a up to version 2.4.1. Impact (as stated)...
CVE-2024-43291 WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder allows Stored XSS.This issue affects Void Contact Form 7 Widget For Elementor Page Builder: from n/a through 2.4.1...
CVE-2024-43320
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for WPBakery Page Builder addons-for-visual-composer allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through 3.9...
CVE-2024-43308
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gutentor Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor allows Stored XSS.This issue affects Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor: from n/a throug...
CVE-2024-43308
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gutentor Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor allows Stored XSS.This issue affects Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor: from n/a throug...
CVE-2024-43308
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gutentor Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor allows Stored XSS.This issue affects Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor: from n/a throug...
CVE-2024-43308
CVE-2024-43308 is a stored XSS in the Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor. Exploitation could occur via improper input neutralization during web page generation, enabling stored script execution on affected pages. Affected range: Gutentor from n/a to 3.3.5. Public refe...
CVE-2024-43330
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.This issue affects PowerPack for Beaver Builder: from n/a before 2.37.4...
CVE-2024-43320
CVE-2024-43320 is a stored XSS vulnerability in Livemesh Addons for WPBakery Page Builder (WPBakery Addons by Livemesh). Affected: Livemesh Addons for WPBakery Page Builder (up to and including 3.9). Root cause: Improper neutralization of input during web page generation. Impact statements are li...
CVE-2024-43320 WordPress WPBakery Page Builder Addons plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for WPBakery Page Builder addons-for-visual-composer allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through 3.9...
CVE-2024-43320 WordPress WPBakery Page Builder Addons plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for WPBakery Page Builder addons-for-visual-composer allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through 3.9...
CVE-2024-43330 WordPress PowerPack for Beaver Builder plugin < 2.37.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.This issue affects PowerPack for Beaver Builder: from n/a before 2.37.4...
CVE-2024-43330 WordPress PowerPack for Beaver Builder plugin < 2.37.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.This issue affects PowerPack for Beaver Builder: from n/a before 2.37.4...
CVE-2024-43330
CVE-2024-43330 concerns PowerPack for Beaver Builder. It is a Reflected Cross-Site Scripting vulnerability in PowerPack for Beaver Builder (IdeaBox Creations) that affects versions up to 2.37.3 (and before 2.37.4). The root cause is improper input neutralization during web page generation, enabli...
CVE-2024-43342 WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...
CVE-2024-43344 WordPress Icegram Engage – Ultimate WP Popup Builder, Lead Generation, Optins, and CTA plugin <= 3.1.25 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Icegram allows Stored XSS.This issue affects Icegram: from n/a through 3.1.25...