2536 matches found
WordPress Role Based Bulk Quantity Pricing Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)
Software Role Based Bulk Quantity Pricing Type Plugin Vulnerable versions = 1.1.6 Fixed in 1.1.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 3f0ce0ce251e Credits Rafie Muhammad...
WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor Plugin < 1.7.6 is vulnerable to Cross Site Scripting (XSS)
Software Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor Type Plugin Vulnerable versions 1.7.6 Fixed in 1.7.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...
WordPress Bulk Edit Events – Create Events in a Bulk Editor Plugin < 1.1.22 is vulnerable to Cross Site Scripting (XSS)
Software Bulk Edit Events – Create Events in a Bulk Editor Type Plugin Vulnerable versions 1.1.22 Fixed in 1.1.22 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 83f3913c0c99 Credit...
WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor Plugin < 1.3.41 is vulnerable to Cross Site Scripting (XSS)
Software WooCommerce Bulk Edit Coupons – WP Sheet Editor Type Plugin Vulnerable versions 1.3.41 Fixed in 1.3.41 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 842ecbe2fc33 Credits...
WordPress Bulk Attachment Download Plugin < 1.3.7 is vulnerable to Cross Site Scripting (XSS)
Software Bulk Attachment Download Type Plugin Vulnerable versions 1.3.7 Fixed in 1.3.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 501e6c0a9644 Credits Rafie Muhammad Patchstack...
WordPress Plugin Bulk edit image alt tag, caption & description 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Bulk edit image alt tag,...
WordPress Bulk Edit Posts and Products in Spreadsheet Plugin < 2.25.4 is vulnerable to Cross Site Scripting (XSS)
Software Bulk Edit Posts and Products in Spreadsheet Type Plugin Vulnerable versions 2.25.4 Fixed in 2.25.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3a91970ca500 Credits Rafi...
WordPress Bulk Edit and Create User Profiles – WP Sheet Editor Plugin < 1.5.26 is vulnerable to Cross Site Scripting (XSS)
Software Bulk Edit and Create User Profiles – WP Sheet Editor Type Plugin Vulnerable versions 1.5.26 Fixed in 1.5.26 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8d00b38962a5...
CVE-2020-36750
The EWWW Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.1. This is due to missing or incorrect nonce validation on the ewwwnggbulkinit function. This makes it possible for unauthenticated attackers to perform bulk image...
Cross site request forgery (csrf)
The EWWW Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.1. This is due to missing or incorrect nonce validation on the ewwwnggbulkinit function. This makes it possible for unauthenticated attackers to perform bulk image...
CVE-2020-36750
The CVE-2020-36750 entry concerns the WordPress EWWW Image Optimizer plugin. Affected component: ewww_ngg_bulk_init() function in versions up to and including 5.8.1. Root cause: insufficient nonce validation leads to a Cross-Site Request Forgery (CSRF). Impact: unauthenticated attackers could tri...
The US Is Spying on the UN Secretary General
The Washington Post is reporting that the US is spying on the UN Secretary General. The reports on Guterres appear to contain the secretary generals personal conversations with aides regarding diplomatic encounters. They indicate that the United States relied on spying powers granted under the...
CVE-2023-36662
The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24...
CVE-2023-36662
The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24...
CVE-2023-36662
The CVE-2023-36662 entry concerns the TechTime User Management components for Atlassian products, which allow stored XSS on the Bulk User Actions page. Affected are: Jira User Management 2.0.0–2.17.1; Confluence User Management 2.0.0–2.15.24; Bitbucket User Management 2.2.2–2.15.24. Root cause: s...
CVE-2023-36662
The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24...
Atlassian TechTime User Management 跨站脚本漏洞
Atlassian TechTime User Management is a user management system from Atlassian Australia. A security vulnerability exists in Atlassian TechTime User Management that stems from a stored cross-site scripting vulnerability in the Bulk User Actions page...
PT-2023-25665 · Atlassian · User Management For Bitbucket +2
Name of the Vulnerable Software and Affected Versions: User Management for Jira versions 2.0.0 through 2.17.1 User Management for Confluence versions 2.0.0 through 2.15.24 User Management for Bitbucket versions 2.2.2 through 2.15.24 Description: The TechTime User Management components for Atlassi...
Gato - GitHub Self-Hosted Runner Enumeration And Attack Tool
Gato, or GitHub Attack Toolkit, is an enumeration and attack tool that allows both blue teamers and offensive security practitioners to evaluate the blast radius of a compromised personal access token within a GitHub organization. The tool also allows searching for and thoroughly enumerating publ...
