CVE-2024-50507

The CVE-2024-50507 entry applies to WordPress plugin DS.DownloadList (versions ≤ 1.3). Affected component: PHP object deserialization in DS.DownloadList leading to Object Injection. Impact described as high severity under CVSS 3.1 (score 9.8) with unauthenticated exploitation and full impact on c...

CVE-2024-50507 WordPress DS.DownloadList plugin <= 1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Daschmi DS.DownloadList dsdownloadlist allows Object Injection.This issue affects DS.DownloadList: from n/a through = 1.3...

CVE-2024-49279: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Floeter Hyperlink Group Block hyperlink-group-block allows Stored XSS.This issue affects Hyperlink Group Block: from n/a through = 1.17.5...

WordPress Accordion Image Menu plugin <= 3.1.3 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Accordion Image Menu versions = 3.1.3...

WordPress MM-Breaking News plugin <= 0.7.9 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin MM-Breaking News versions = 0.7.9...

WordPress Visual Sound plugin <= 1.03 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Visual Sound versions = 1.03...

WordPress Quick Code plugin <= 1.0 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Quick Code versions = 1.0...

WordPress Enhanced Search Box plugin <= 0.6.1 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Enhanced Search Box versions = 0.6.1...

WordPress Review Ratings plugin <= 1.6 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Review Ratings versions = 1.6...

WordPress Visual Sound (old) plugin <= 1.06 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Visual Sound old versions = 1.06...

WordPress infolinks Ad Wrap plugin <= 1.0.2 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Daniel Ruf in WordPress Plugin infolinks Ad Wrap versions = 1.0.2...

WordPress Special Feed Items Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Special Feed Items Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8051 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 998826800645 Credits Daniel Ruf Required...

WordPress Favicon Generator plugin < 2.1 - Arbitrary File Upload via CSRF vulnerability

Arbitrary File Upload via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Favicon Generator versions 2.1...

WordPress Simple Headline Rotator plugin <= 1.0 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Simple Headline Rotator versions = 1.0...

WordPress Misiek Paypal plugin <= 1.1.20090324 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Misiek Paypal versions = 1.1.20090324...

WordPress ILC Thickbox plugin <= 1.0 - Settings update via CSRF vulnerability

Settings update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin ILC Thickbox versions = 1.0...

WordPress Misiek Photo Album plugin <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Daniel Ruf in WordPress Plugin Misiek Photo Album versions = 1.4.3...

WordPress Blog Introduction plugin <= 0.3.0 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Blog Introduction versions = 0.3.0...

WordPress Gixaw Chat plugin <= 1.0 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Gixaw Chat versions = 1.0...

WordPress Blog Introduction Plugin <= 0.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Blog Introduction Type Plugin Vulnerable versions = 0.3.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7862 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b5cd399b1013 Credits Daniel Ruf Required...