WordPress Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29771 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID...

MAL-2024-1035 Malicious code in uikit-dark-mode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1635673444c06a301ab432c5be76003f80d7d35f1d66f5706f0bef811b9070cf The OpenSSF Package Analysis project identified 'uikit-dark-mode' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in uikit-dark-mode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1635673444c06a301ab432c5be76003f80d7d35f1d66f5706f0bef811b9070cf The OpenSSF Package Analysis project identified 'uikit-dark-mode' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

Funnelforms Free < 3.4.2 - Missing Authorization to Enable/Disable Dark Mode

Description The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaf2triggerdarkmode function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2023-5387

The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaf2triggerdarkmode function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and...

Design/Logic Flaw

The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaf2triggerdarkmode function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and...

CVE-2023-5387 Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode

The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaf2triggerdarkmode function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and...

CVE-2023-47531

Cross-Site Request Forgery CSRF vulnerability in DroitThemes Droit Dark Mode.This issue affects Droit Dark Mode: from n/a through 1.1.2...

CVE-2023-47531

Cross-Site Request Forgery CSRF vulnerability in DroitThemes Droit Dark Mode.This issue affects Droit Dark Mode: from n/a through 1.1.2...

CVE-2023-47531 WordPress Droit Dark Mode Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in DroitThemes Droit Dark Mode.This issue affects Droit Dark Mode: from n/a through 1.1.2...

CVE-2023-47531

CVE-2023-47531: Cross-Site Request Forgery in Droit Dark Mode (WordPress plugin) affects versions up to 1.1.2. Root cause identified as missing or incorrect nonce validation on the save_settings() function, enabling unauthenticated CSRF actions to modify plugin settings. Public detail indicates p...

WordPress Plugin Droit Dark Mode Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Droit Dark Mode Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Droit Dark Mode Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47531 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a523b20c48d2 Credits Elliot Required...

WordPress Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress Type Plugin Vulnerable versions = 1.0.0 Fixed in 1.0.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

Grepmarx - A Source Code Static Analysis Platform For AppSec Enthusiasts

Grepmarx is a web application providing a single platform to quickly understand, analyze and identify vulnerabilities in possibly large and unknown code bases. Features SAST Static Analysis Security Testing capabilities: Multiple languages support: C/C++, C, Go, HTML, Java, Kotlin, JavaScript,...

March 28, 2023—KB5023778 (OS Build 22621.1485) Preview

None None...

WordPress WP Dark Mode Plugin < 4.0.8 is vulnerable to Local File Inclusion

Software WP Dark Mode Type Plugin Vulnerable versions 4.0.8 Fixed in 4.0.8 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-0467 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID b9de22c09750 Credits Alex Sanford Required privilege Subscriber...

CVE-2023-0467

The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using it to load a PHP template. This leads to Local File Inclusion on servers where non-existent directories may be traversed, or when chained with another vulnerability allowing...

CVE-2023-0467

The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using it to load a PHP template. This leads to Local File Inclusion on servers where non-existent directories may be traversed, or when chained with another vulnerability allowing...

CVE-2023-0467 WP Dark Mode < 4.0.8 - Subscriber+ Local File Inclusion

The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using it to load a PHP template. This leads to Local File Inclusion on servers where non-existent directories may be traversed, or when chained with another vulnerability allowing...