7649 matches found
PT-2024-39042 · WordPress · Easy Paypal Events
Name of the Vulnerable Software and Affected Versions: Easy PayPal Events plugin for WordPress versions up to, and including, 1.2.1 Description: The issue is due to missing or incorrect nonce validation on the wpeevent plugin buttons function, making it possible for unauthenticated attackers to...
WordPress plugin Easy Digital Downloads 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
PT-2024-11528 · WordPress · Easy Digital Downloads
Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress versions up to, and including 3.3.3 Description: The issue concerns deserialization of untrusted input via the uploadfile parameter. This allows...
WordPress Easy Property Listings plugin < 3.5.4 - Arbitrary Contact Deletion via CSRF vulnerability
Arbitrary Contact Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Easy Property Listings versions 3.5.4...
CVE-2024-3163
The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack...
CVE-2024-3163 Easy Property Listings < 3.5.4 - Arbitrary Contact Deletion via CSRF
The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack...
CVE-2024-3163
The Easy Property Listings WordPress plugin prior to version 3.5.4 is vulnerable due to missing CSRF protection when deleting contacts in bulk. This design flaw could allow a CSRF attacker to cause a logged-in administrator to delete contacts via a CSRF attack. Affected products/versions: Easy Pr...
WordPress Easy Property Listings Plugin < 3.5.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software Easy Property Listings Type Plugin Vulnerable versions 3.5.4 Fixed in 3.5.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3163 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 97fae66f4766 Credits Bob Matyas...
WordPress plugin Easy Property Listings 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-24167 · WordPress · Easy Property Listings
Name of the Vulnerable Software and Affected Versions: Easy Property Listings WordPress plugin versions prior to 3.5.4 Description: The issue is related to a lack of CSRF check when deleting contacts in bulk, which could allow attackers to make a logged-in admin delete them via a CSRF attack. Thi...
Easy File Sharing FTP Server 3.6 Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Easy File Sharing FTP Server 3.6 Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Easy...
CVE-2024-5057
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12...
CVE-2024-5057
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12...
CVE-2024-5057 WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12...
CVE-2024-5057 WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12...
CVE-2024-5057
WordPress Easy Digital Downloads plugin
HWA JIUH DIGITAL Easy test Online Learning and Testing Platform SQL注入漏洞
HWA JIUH DIGITAL Easy test Online Learning and Testing Platform is an easy test online learning and testing platform from HWA JIUH DIGITAL. A SQL injection vulnerability exists in HWA JIUH DIGITAL Easy test Online Learning and Testing Platform versions prior to 24A01, which stems from failure to...
PT-2024-38943 · Hwa Jiuh Digital Technology · Easy Test Online Learning/Testing Platform
Name of the Vulnerable Software and Affected Versions: Easy test Online Learning and Testing Platform affected versions not specified Description: The Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing...
HWA JIUH DIGITAL Easy test Online Learning and Testing Platform 跨站脚本漏洞
HWA JIUH DIGITAL Easy test Online Learning and Testing Platform is an Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL. A cross-site scripting vulnerability exists in HWA JIUH DIGITAL Easy test Online Learning and Testing Platform versions prior to 24A01, which stems from...
WordPress plugin Easy Digital Downloads SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...