CVE-2024-47339 WordPress WP Mail Catcher plugin <= 2.1.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in James Ward WP Mail Catcher allows Reflected XSS.This issue affects WP Mail Catcher: from n/a through 2.1.9...

WordPress plugin WP Mail Catcher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

WordPress WP Mail Catcher plugin <= 2.1.9 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin WP Mail Catcher versions = 2.1.9...

WordPress WP Mail Catcher Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)

Software WP Mail Catcher Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.1.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47339 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c286bdf972a5 Credits Le Ngoc Anh Required privilege...

SUSE-SU-2024:1450-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging JDK-8319851,bsc1222979 - CVE-2024-21068: Fixed integer overflow in C1 compiler address generation JDK-8322122,bsc1222983 - CVE-2024-21085: Fixed Pack200...

WP Mail Catcher < 2.1.7 - Cross-Site Request Forgery

Description The WP Mail Catcher plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.6. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform unauthorized actions...

CVE-2024-32099

Cross-Site Request Forgery CSRF vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6...

CVE-2024-32099 WordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6...

CVE-2024-32099 WordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6...

CVE-2024-32099

CVE-2024-32099 is a Cross-Site Request Forgery (CSRF) vulnerability in the WP Mail Catcher WordPress plugin, affecting WP Mail Catcher versions up to 2.1.6. The vulnerability is documented with a CVSS v3.1 base score of 4.3 (Medium) and vectors including Network attack, Low attack complexity, No ...

PT-2024-24404 · Unknown · Wp Mail Catcher

Name of the Vulnerable Software and Affected Versions: WP Mail Catcher versions through 2.1.6 Description: A Cross-Site Request Forgery CSRF issue affects James Ward WP Mail Catcher. This allows an attacker to perform unintended actions on a user's account. Recommendations: For WP Mail Catcher...

WordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability

Cross Site Request Forgery vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin WP Mail Catcher versions = 2.1.6...

WordPress WP Mail Catcher Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Mail Catcher Type Plugin Vulnerable versions = 2.1.6 Fixed in 2.1.7 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32099 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 669fc4c2ce50 Credits Dhabaleshwar Das...

Mail logging - WP Mail Catcher < 2.1.4 - Admin+ SQLi

Description The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2023-50844

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affects Mail logging – WP Mail Catcher: from n/a through 2.1.3...

CVE-2023-50844

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affects Mail logging – WP Mail Catcher: from n/a through 2.1.3...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affects Mail logging – WP Mail Catcher: from n/a through 2.1.3...

CVE-2023-50844

CVE-2023-50844 is a SQL Injection flaw in the WordPress plugin “Mail logging – WP Mail Catcher,” caused by improper neutralization of input in an SQL command. Affected versions are listed as from n/a through 2.1.3. The vulnerability has been patched; users should update to a fixed release. The ba...

CVE-2023-50844 WordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affects Mail logging – WP Mail Catcher: from n/a through 2.1.3...

WordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection

Software WP Mail Catcher Type Plugin Vulnerable versions = 2.1.3 Fixed in 2.1.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50844 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 8506292c33f5 Credits Muhammad Daffa Required privilege Administrator...