CVE-2024-31366

Missing Authorization vulnerability in Themify Post Type Builder PTB.This issue affects Post Type Builder PTB: from n/a through 2.0.8...

CVE-2024-31365

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themify Post Type Builder PTB allows Reflected XSS.This issue affects Post Type Builder PTB: from n/a before 2.1.1...

CVE-2024-31366

Technical details about CVE-2024-31366 are not publicly provided in the supplied documents. Monitor for updates from vendors/researchers for affected product/Themify PTB PTB, version ranges, impact, and fixes.

WordPress Post Type Builder (PTB) plugin < 2.1.4 - Subscriber+ Arbitrary Post/Page Creation vulnerability

Subscriber+ Arbitrary Post/Page Creation vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Post Type Builder PTB versions 2.1.4...

CVE-2024-31365

CVE-2024-31365 is a Reflected XSS in Themify Post Type Builder (PTB). The issue affects PTB versions before 2.1.1; root cause is improper input handling during web page generation. CVSS vector indicates NETWORK access, LOW confidentiality/integrity/availability impact, UI interaction required, an...

WordPress Post Type Builder (PTB) plugin < 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Post Type Builder PTB versions 2.1.1...

WordPress Plugin Post Type Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Post Type Builder (PTB) Plugin < 2.1.4 is vulnerable to Content Injection

Software Post Type Builder PTB Type Plugin Vulnerable versions 2.1.4 Fixed in 2.1.4 OWASP Top 10 A1: Broken Access Control Classification Content Injection CVE CVE-2024-31366 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 60019a0448c7 Credits Dave Jong Patchstack...

WordPress Plugin Beaver Builder Addons by WPZOOM 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress...

PT-2024-24011 · Themify · Themify Post Type Builder

Name of the Vulnerable Software and Affected Versions: Themify Post Type Builder PTB versions 2.0.8 and earlier Description: The issue is related to a Missing Authorization vulnerability in Themify Post Type Builder PTB. Recommendations: For Themify Post Type Builder PTB versions 2.0.8 and earlie...

PT-2024-19598 · WordPress · Powerpack Lite For Beaver Builder

Name of the Vulnerable Software and Affected Versions: PowerPack Lite for Beaver Builder plugin for WordPress versions prior to 1.3.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes. This allow...

WordPress Plugin Beaver Builder Addons by WPZOOM 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress...

PT-2024-24010 · Themify · Themify Post Type Builder

Name of the Vulnerable Software and Affected Versions: Themify Post Type Builder PTB versions prior to 2.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacke...

WordPress Plugin Cards for Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-19068 · Wpzoom · Beaver Builder Addons

Name of the Vulnerable Software and Affected Versions: Beaver Builder Addons by WPZOOM plugin for WordPress versions up to, and including, 1.3.4 Description: The issue is related to Stored Cross-Site Scripting via the Button widget due to insufficient input sanitization and output escaping. This...

WordPress Plugin Bold Page Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Plugin Bold Page Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Plugin Beaver Builder Addons by WPZOOM 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress...

WordPress Plugin PowerPack Lite for Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress...

WordPress Plugin Post Type Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...