42 matches found
CVE-2024-10814 Code Embed <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery
The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5 via the cegetfile function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originati...
WordPress plugin Code Embed 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
WordPress Code Embed plugin <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery vulnerability
Authenticated Contributor+ Server-Side Request Forgery vulnerability discovered by Max Boll b0lli in WordPress Plugin Code Embed versions = 2.5...
PT-2024-16571 · WordPress · Code Embed
Name of the Vulnerable Software and Affected Versions: Code Embed plugin for WordPress versions up to 2.5 Description: The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery via the ce get file function. This makes it possible for authenticated attackers, with...
WordPress Code Embed Plugin <= 2.5 is vulnerable to Server Side Request Forgery (SSRF)
Software Code Embed Type Plugin Vulnerable versions = 2.5 Fixed in 2.5.1 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-10814 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 4cf23fa82f5e Credits Max Boll b0lli Required privilege...
CVE-2024-8804
The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's script embed functionality in all versions up to, and including, 2.4 due to insufficient restrictions on who can utilize the functionality. This makes it possible for authenticated attackers, with...
CVE-2024-8804 Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's script embed functionality in all versions up to, and including, 2.4 due to insufficient restrictions on who can utilize the functionality. This makes it possible for authenticated attackers, with...
CVE-2024-8804
CVE-2024-8804 affects the WordPress Code Embed plugin, with a stored XSS in the plugin’s script embed feature that affects all versions up to 2.4. An attacker with contributor-level access or higher can inject arbitrary scripts that execute when users load the affected pages. The vulnerability is...
WordPress Code Embed plugin <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Leo in WordPress Plugin Code Embed versions = 2.4...
WordPress Code Embed Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)
Software Code Embed Type Plugin Vulnerable versions = 2.4 Fixed in 2.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8804 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 053ae53cce0b Credits Leo Required privilege Contributo...
WordPress plugin Code Embed 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-49837
Uncontrolled Resource Consumption vulnerability in David Artiss Code Embed.This issue affects Code Embed: from n/a through 2.3.6...
CVE-2023-49837
Uncontrolled Resource Consumption vulnerability in David Artiss Code Embed.This issue affects Code Embed: from n/a through 2.3.6...
CVE-2023-49837
A vulnerability in David Artiss Code Embed simple-embed-code.This issue affects Code Embed: from n/a through = 2.3.6...
CVE-2023-49837
CVE-2023-49837 concerns the WordPress Code Embed (simple-embed-code) plugin. A Denial of Service vulnerability exists in Code Embed versions ≤ 2.3.6 that allows an authenticated attacker with Contributor+ privileges to trigger uncontrolled resource consumption, potentially impacting site availabi...
CVE-2023-49837 WordPress embed-code plugin <= 2.3.6 - Denial of Service Attack vulnerability
Uncontrolled Resource Consumption vulnerability in David Artiss Code Embed.This issue affects Code Embed: from n/a through 2.3.6...
WordPress Plugin Code Embed 资源管理错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A resource management error vulnerability...
PT-2024-13813 · Unknown · Code Embed
Name of the Vulnerable Software and Affected Versions: Code Embed versions prior to 2.3.7 Description: The issue is related to Uncontrolled Resource Consumption. This affects the Code Embed software. Recommendations: For versions prior to 2.3.7, update to version 2.3.7 or later to resolve the iss...
WordPress Code Embed Plugin <= 2.3.6 is vulnerable to Denial of Service Attack
Software Code Embed Type Plugin Vulnerable versions = 2.3.6 Fixed in 2.3.7 OWASP Top 10 A4: Insecure Design Classification Denial of Service Attack CVE CVE-2023-49837 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 64a9010e7ee7 Credits Universe Required privilege Contribut...
