415 matches found
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ankit Agarwal, Priyanshu Mittal Easy Coming Soon plugin = 2.3 versions...
CVE-2023-25483 WordPress Easy Coming Soon Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ankit Agarwal, Priyanshu Mittal Easy Coming Soon plugin = 2.3 versions...
CVE-2023-25483
CVE-2023-25483 affects the WordPress plugin Easy Coming Soon (<= 2.3). The issue is an admin+ Stored XSS vulnerability. The Red Hat and NVD entries confirm the description and affected product; PatchStack summarizes impact and solution details but does not indicate a fixed version. The vulnera...
WordPress plugin easy-coming-soon cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Easy Coming Soon <= 2.3 - Admin+ Stored XSS
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd Plugin <= 6.15.13.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Coming Soon Page, Under Construction & Maintenance Mode by SeedProd Type Plugin Vulnerable versions = 6.15.13.1 Fixed in 6.15.15.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-4975 Patch priority Low CVSS severity Low 4.3 Developer...
CVE-2023-37893
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Chop-Chop Coming Soon Chop Chop plugin = 2.2.4 versions...
CVE-2023-37893
CVE-2023-37893 is an unauthenticated reflected XSS in the Coming Soon Chop Chop WordPress plugin (cc-coming-soon) version ≤ 2.2.4. Root cause details are not provided in the initial document, but Patchstack notes indicate no fixed version yet (Fixed in: N/A). Public sources also confirm the vulne...
WordPress plugin Coming Soon Chop Chop Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress Easy Coming Soon Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)
Software Easy Coming Soon Type Plugin Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25483 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d32749ab7ef6 Credits Rio Darmawan Required...
WordPress Coming Soon Master Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Coming Soon Master Type Plugin Vulnerable versions = 1.0 Fixed in 1.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID eeab1b155e0b Credits Rafie Muhammad Patchstack Required...
WordPress Coming Soon Pages for WordPress - Coming Soon Booster Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)
Software Coming Soon Pages for WordPress - Coming Soon Booster Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 5b2ff11e8b80 Credit...
WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)
Software Rocket Maintenance Mode & Coming Soon Page Type Plugin Vulnerable versions = 4.3 Fixed in 4.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bee342469bdf Credits Rafie...
WordPress Coming Soon Page and Maintenance Mode for WordPress Block Editor Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
Software Coming Soon Page and Maintenance Mode for WordPress Block Editor Type Plugin Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...
thankyouforcoming.net Cross Site Scripting vulnerability OBB-3509494
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2020-36752
The Coming Soon & Maintenance Mode Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.57. This is due to missing or incorrect nonce validation on the savemetabox function. This makes it possible for unauthenticated attackers to save meta boxe...
WordPress Coming Soon Chop Chop Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)
Software Coming Soon Chop Chop Type Plugin Vulnerable versions = 2.2.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-37893 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a25fdf76e34 Credits Phd Required...
WordPress Plugin Coming Soon & Maintenance Mode Page 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2023-11892 · WordPress · The Coming Soon Page & Maintenance Mode
Name of the Vulnerable Software and Affected Versions: Coming Soon & Maintenance Mode Page plugin for WordPress versions up to, and including, 1.57 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the save meta box function. This allo...
WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection
Software Coming Soon Type Plugin Vulnerable versions = 1.5.9 Fixed in 1.6.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-46849 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 0a93f0e48b26 Credits Le Ngoc Anh Required privilege Administrator Publishe...