7649 matches found
CVE-2024-51570
CVE-2024-51570 affects WordPress plugin Easy Gallery (Odihost)
WordPress plugin WP EASY RECIPE 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin Easy Gallery SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
PT-2024-34766 · WordPress · Wp Easy Recipe
Name of the Vulnerable Software and Affected Versions: WP EASY RECIPE versions 1.6 and earlier Description: The issue involves improper handling of input during web page generation, leading to a Stored Cross-site Scripting XSS problem. This allows for Stored XSS attacks. Recommendations: For WP...
PT-2024-34713 · Odihost · Odihost Easy Gallery
Name of the Vulnerable Software and Affected Versions: Odihost Easy Gallery versions 1.4 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...
WordPress Easy Social Sharebar plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Easy Social Sharebar versions = 1.0.0...
CVE-2024-10269
The Easy SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access a...
CVE-2024-10269 Easy SVG Support <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The Easy SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access a...
WordPress Easy Social Sharebar Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software Easy Social Sharebar Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51833 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 39ebcdfedab1 Credits SOPROBRO Required privilege...
WordPress Easy SVG Support plugin <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability
Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Easy SVG Support versions = 3.7...
Malicious code in easy-transify (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da33e7bf1f97126745cda88021b8ac2884cd095a84a70caaf6938bb505f3f5df The OpenSSF Package Analysis project identified 'easy-transify' @ 7.2.3 npm as malicious. It is considered malicious because: - The package...
MAL-2024-10483 Malicious code in easy-transify (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da33e7bf1f97126745cda88021b8ac2884cd095a84a70caaf6938bb505f3f5df The OpenSSF Package Analysis project identified 'easy-transify' @ 7.2.3 npm as malicious. It is considered malicious because: - The package...
WordPress Easy SVG Support Plugin <= 3.7 is vulnerable to Cross Site Scripting (XSS)
Software Easy SVG Support Type Plugin Vulnerable versions = 3.7 Fixed in 3.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10269 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 74db701b56a6 Credits Francesco Carlucci Require...
PT-2024-38938 · WordPress · Easy Pricing Tables
Name of the Vulnerable Software and Affected Versions: Easy Pricing Tables plugin for WordPress versions up to, and including, 3.2.6 Description: The issue is related to Stored Cross-Site Scripting via the fontFamily attribute due to insufficient input sanitization and output escaping. This allow...
WordPress plugin Easy Pricing Tables 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Easy Pricing Tables plugin <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Easy Pricing Tables versions = 3.2.6...
WordPress Easy Pricing Tables Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)
Software Easy Pricing Tables Type Plugin Vulnerable versions = 3.2.6 Fixed in 3.2.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8323 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 255a8654742f Credits Francesco Carlucci...
CVE-2024-43162
Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.2.12...
CVE-2024-43162
Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.2.12...
