WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Bold Page Builder versions = 5.1.3...

SUSE CVE-2024-50000

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5etirbuilderalloc In mlx5etirbuilderalloc kvzalloc may return NULL which is dereferenced on the next line in a reference to the modify field. Found by Linux Verification Center linuxtesting.org wit...

WordPress Bold Page Builder Plugin <= 5.1.3 is vulnerable to Broken Access Control

Software Bold Page Builder Type Plugin Vulnerable versions = 5.1.3 Fixed in 5.1.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-50417 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID dd664c481e03 Credits Trương Hữu Phúc truonghuuph...

WordPress Beaver Builder Plugin <= 2.8.3.7 is vulnerable to Cross Site Scripting (XSS)

Software Beaver Builder Type Plugin Vulnerable versions = 2.8.3.7 Fixed in 2.8.3.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50430 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0af9c27e34dd Credits João Pedro S Alcântara Kinorth...

WordPress App Builder Plugin <= 5.3.7 is vulnerable to Broken Authentication

Software App Builder Type Plugin Vulnerable versions = 5.3.7 Fixed in 5.3.8 OWASP Top 10 A3: Injection Classification Broken Authentication CVE CVE-2024-9302 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 82e5ff2f8d20 Credits wesley wcraft Required privilege...

WordPress SurveyJS: Drag & Drop WordPress Form Builder Plugin <= 1.9.136 is vulnerable to Arbitrary File Upload

Software SurveyJS: Drag & Drop WordPress Form Builder Type Plugin Vulnerable versions = 1.9.136 Fixed in 1.12.4 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-50427 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 71e521e4a742 Credits...

WordPress plugin Elementor Header & Footer Builder 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

WordPress PDF Generator Addon for Elementor Page Builder Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

Software PDF Generator Addon for Elementor Page Builder Type Plugin Vulnerable versions = 1.7.4 Fixed in 1.7.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50449 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7f59036ae201 Credits João...

WordPress Elementor Header & Footer Builder plugin <= 1.6.43 - Authenticated (Contributor+) Information Disclosure vulnerability

Authenticated Contributor+ Information Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.43...

DEBIAN-CVE-2024-50000

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5etirbuilderalloc In mlx5etirbuilderalloc kvzalloc may return NULL which is dereferenced on the next line in a reference to the modify field. Found by Linux Verification Center linuxtesting.org wit...

UBUNTU-CVE-2024-50000

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5etirbuilderalloc In mlx5etirbuilderalloc kvzalloc may return NULL which is dereferenced on the next line in a reference to the modify field. Found by Linux Verification Center linuxtesting.org wit...

CVE-2024-49325

Subscriber Broken Access Control in Photo Gallery Builder = 3.0 versions...

CVE-2024-49325 WordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerability

Missing Authorization vulnerability in wpdiscover Photo Gallery Builder photo-gallery-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Photo Gallery Builder: from n/a through = 3.0...

CVE-2024-49325

CVE-2024-49325 affects WordPress Photo Gallery Builder plugin (versions

CVE-2024-49325 WordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerability

Subscriber Broken Access Control in Photo Gallery Builder = 3.0 versions...

CVE-2024-48049

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mighty Plugins Mighty Builder allows Stored XSS.This issue affects Mighty Builder: from n/a through 1.0.2...

CVE-2024-48049 WordPress Mighty Builder plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mighty Plugins Mighty Builder mighty-builder allows Stored XSS.This issue affects Mighty Builder: from n/a through = 1.0.2...

CVE-2024-48049

CVE-2024-48049 is a Stored XSS in Mighty Builder (WordPress) plugin up to version 1.0.2 caused by improper input neutralization during web page generation. The vulnerability affects Mighty Builder and can store malicious scripts on affected sites. Security ratings in the documents show a low over...

CVE-2024-48049 WordPress Mighty Builder plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mighty Plugins Mighty Builder mighty-builder allows Stored XSS.This issue affects Mighty Builder: from n/a through = 1.0.2...

PT-2024-32968 · Unknown · Mighty Builder

Name of the Vulnerable Software and Affected Versions: Mighty Builder versions 1.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, which leads to a Stored XSS vulnerability. This allows for Cross-site Scripting, where an attacker can...