184 matches found
CVE-2024-29771 WordPress Dracula Dark Mode plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftLab Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress allows Stored XSS.This issue affects Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress: from n/a...
CVE-2024-29771 WordPress Dracula Dark Mode plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftLab Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress allows Stored XSS.This issue affects Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress: from n/a...
CVE-2024-29771
CVE-2024-29771 — Dracula Dark Mode (WordPress plugin) stores cross-site scripting via improper input neutralization during web page generation. Affected: Dracula Dark Mode — The Revolutionary Dark Mode Plugin For WordPress; versions includes from n/a through 1.0.8. The connected documents confirm...
CVE-2024-2962
The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the adminreloadnavmenu function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to...
CVE-2024-2962
CVE-2024-2962 affects the Networker - Tech News WordPress Theme with Dark Mode. The vulnerability arises from a missing capability check in the admin_reload_nav_menu() function, affecting all versions up to and including 1.1.9. This allows unauthenticated attackers to modify the location of displ...
CVE-2024-2962 Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorization
The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the adminreloadnavmenu function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to...
WordPress Plugin Dracula Dark Mode 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
CVE-2024-29771: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftLab Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress allows Stored XSS.This issue affects Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress: from n/a...
PT-2024-23013 · WordPress · Dracula Dark Mode
Name of the Vulnerable Software and Affected Versions: Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress versions 1.0.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS...
Networker - Tech News WordPress Theme with Dark Mode < 1.1.10 - Missing Authorization
Description The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the adminreloadnavmenu function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated...
WordPress Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)
Software Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29771 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID...
MAL-2024-1035 Malicious code in uikit-dark-mode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1635673444c06a301ab432c5be76003f80d7d35f1d66f5706f0bef811b9070cf The OpenSSF Package Analysis project identified 'uikit-dark-mode' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in uikit-dark-mode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1635673444c06a301ab432c5be76003f80d7d35f1d66f5706f0bef811b9070cf The OpenSSF Package Analysis project identified 'uikit-dark-mode' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...
Funnelforms Free < 3.4.2 - Missing Authorization to Enable/Disable Dark Mode
Description The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaf2triggerdarkmode function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2023-5387
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaf2triggerdarkmode function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and...
Design/Logic Flaw
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaf2triggerdarkmode function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and...
CVE-2023-5387 Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaf2triggerdarkmode function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and...
CVE-2023-5387: Missing Authorization
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaf2triggerdarkmode function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and...