Lucene search
K

6 matches found

Patchstack
Patchstack
added 2024/06/24 9:54 a.m.2 views

WordPress Grey Opaque theme <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Download-Button Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Download-Button Shortcode vulnerability discovered by Francesco Carlucci in WordPress Theme Grey Opaque versions = 2.0.1...

6.4CVSS5.8AI score0.00201EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/06/22 4:15 a.m.0 views

CVE-2024-5966

The Grey Opaque theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Download-Button shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS5.9AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/10/16 11:31 p.m.6 views

CVE-2012-10016 Halulu simple-download-button-shortcode Plugin Download simple-download-button_dl.php information disclosure

A vulnerability classified as problematic has been found in Halulu simple-download-button-shortcode Plugin 1.0 on WordPress. Affected is an unknown function of the file simple-download-buttondl.php of the component Download Handler. The manipulation of the argument file leads to information...

4.3CVSS7.5AI score0.00306EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/10/16 11:31 p.m.11 views

CVE-2012-10016 Halulu simple-download-button-shortcode Plugin Download simple-download-button_dl.php information disclosure

A vulnerability classified as problematic has been found in Halulu simple-download-button-shortcode Plugin 1.0 on WordPress. Affected is an unknown function of the file simple-download-buttondl.php of the component Download Handler. The manipulation of the argument file leads to information...

4.3CVSS7.5AI score0.00306EPSS
Exploits0References3
CVE
CVE
added 2023/10/16 11:31 p.m.53 views

CVE-2012-10016

CVE-2012-10016 affects the Halulu simple-download-button-shortcode WordPress plugin (version 1.0). The vulnerability lies in an unknown function within the file simple-download-button_dl.php of the Download Handler, where manipulation of the file argument leads to information disclosure. The issu...

7.5CVSS5.7AI score0.00306EPSS
Exploits0References3Affected Software1
0day.today
0day.today
added 2012/06/07 12:0 a.m.20 views

Wordpress Plugins - Simple Download Button Shortcode Remote File Disclosure

Exploit for php platform in category web applications Description : Wordpress Plugins - Simple Download Button Shortcode Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/simple-download-button-shortcode/ Plugins :...

7.1AI score
Exploits0
Rows per page
Query Builder