12922 matches found
CVE-2023-50833 WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExtendThemes Colibri Page Builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through 1.0.239...
CVE-2023-49762
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AppMySite AppMySite – Create an app with the Best Mobile App Builder.This issue affects AppMySite – Create an app with the Best Mobile App Builder: from n/a through 3.11.0...
CVE-2023-49762
CVE-2023-49762 affects the WordPress plugin AppMySite – Create an app with the Best Mobile App Builder (versions
CVE-2023-49762 WordPress AppMySite Plugin <= 3.11.0 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AppMySite AppMySite – Create an app with the Best Mobile App Builder.This issue affects AppMySite – Create an app with the Best Mobile App Builder: from n/a through 3.11.0...
WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection
Software NEX-Forms – Ultimate Form Builder Type Plugin Vulnerable versions = 8.5.5 Fixed in 8.5.6 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50838 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 3121cd44ed44 Credits Khalid Yusuf Required privilege...
WordPress plugin Colibri Page Builder cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection
Software Funnel Builder for WordPress by FunnelKit Type Plugin Vulnerable versions = 2.14.3 Fixed in 2.14.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50856 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID b73a1107b7a1 Credits Muhammad Daffa Requir...
PT-2023-31332 · Appmysite · Appmysite
Name of the Vulnerable Software and Affected Versions: AppMySite – Create an app with the Best Mobile App Builder versions n/a through 3.11.0 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made...
WordPress Colibri Page Builder Plugin <= 1.0.246 is vulnerable to Cross Site Scripting (XSS)
Software Colibri Page Builder Type Plugin Vulnerable versions = 1.0.246 Fixed in 1.0.248 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50833 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1d11825976b2 Credits LVT-tholv2k Required privileg...
CVE-2023-49155
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8...
CVE-2023-49155
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8...
CVE-2023-49155
CVE-2023-49155 is a CSRF vulnerability in the WordPress plugin Button Generator – easily Button Builder. Affected versions are
CVE-2023-49823
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.6.1...
CVE-2023-49823
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.6.1...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.6.1...
CVE-2023-49823
CVE-2023-49823 affects Bold Page Builder (WordPress plugin)
CVE-2023-49823 WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.6.1...
CVE-2023-49170
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in captainform Forms by CaptainForm – Form Builder for WordPress allows Reflected XSS.This issue affects Forms by CaptainForm – Form Builder for WordPress: from n/a through 2.5.3...
CVE-2023-49170
CVE-2023-49170 affects WordPress plugin Forms by CaptainForm – Form Builder for WordPress (versions up to and including 2.5.3). Root cause is improper input neutralization during web page generation, enabling a Reflected Cross-Site Scripting (XSS) via the REQUEST_URI parameter. Public sources cor...