CVE-2024-10802

The Hash Elements plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hashelementsgetpoststitlebyid function in all versions up to, and including, 1.4.7. This makes it possible for unauthenticated attackers to retrieve draft post titles that...

CVE-2024-10802

CVE-2024-10802 : WordPress Hash Elements plugin vulnerable to unauthorized access due to a missing capability check on hash_elements_get_posts_title_by_id() in all versions

CVE-2024-10802 Hash Elements <= 1.4.7 - Missing Authorization to Unauthenticated Draft Post Title Exposure

The Hash Elements plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hashelementsgetpoststitlebyid function in all versions up to, and including, 1.4.7. This makes it possible for unauthenticated attackers to retrieve draft post titles that...

WordPress plugin Hash Elements 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-10802: Missing Authorization

The Hash Elements plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hashelementsgetpoststitlebyid function in all versions up to, and including, 1.4.7. This makes it possible for unauthenticated attackers to retrieve draft post titles that...

WordPress Hash Elements Plugin <= 1.4.7 is vulnerable to Broken Access Control

Software Hash Elements Type Plugin Vulnerable versions = 1.4.7 Fixed in 1.4.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10802 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 100e3ce93b18 Credits Francesco Carlucci Required...

The vulnerability of the Amiro.CMS content management system arises from the failure to take measures to neutralize special elements, allowing attackers to carry out XSS attacks.

The vulnerability of the Amiro.CMS content management system exists because measures to neutralize specific elements have not been taken. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...

bpftool: Fix undefined behavior in qsort(NULL 0 ...)

...

PT-2024-16561 · WordPress · Hash Elements

Name of the Vulnerable Software and Affected Versions: Hash Elements plugin for WordPress versions up to, and including, 1.4.7 Description: The issue is related to unauthorized access of data due to a missing capability check on the hash elements get posts title by id function. This allows...

CVE-2024-50572: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.2, SCALANCE...

CVE-2024-43613: Improper Neutralization of Special Elements used in a Command

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability...

CVE-2024-49042: Improper Neutralization of Special Elements used in a Command

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability...

The vulnerability of microprogramming software in Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM) arises from improper elimination of special elements in output data, allowing attackers to trigger a service failure.

The vulnerability of Microprogramming Software under Intel Active Management Technology AMT and Intel Standard Manageability ISM is related to incorrect elimination of special elements in output data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2024-51589

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wpcirqle Bigmart Elements allows DOM-Based XSS.This issue affects Bigmart Elements: from n/a through 1.0.3...

CVE-2024-51592

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in bnayawpguy Meta Store Elements allows DOM-Based XSS.This issue affects Meta Store Elements: from n/a through 1.0.9...

CVE-2024-51589

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpcirqle Bigmart Elements bigmart-elements allows DOM-Based XSS.This issue affects Bigmart Elements: from n/a through = 1.0.3...

CVE-2024-51592

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mystical Themes Meta Store Elements meta-store-elements allows DOM-Based XSS.This issue affects Meta Store Elements: from n/a through = 1.0.9...

CVE-2024-51589 WordPress Bigmart Elements plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpcirqle Bigmart Elements bigmart-elements allows DOM-Based XSS.This issue affects Bigmart Elements: from n/a through = 1.0.3...

CVE-2024-51589 WordPress Bigmart Elements plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpcirqle Bigmart Elements bigmart-elements allows DOM-Based XSS.This issue affects Bigmart Elements: from n/a through = 1.0.3...

CVE-2024-51589

CVE-2024-51589 refers to a DOM-based XSS vulnerability in WordPress plugin Bigmart Elements (versions &lt;= 1.0.3). The description in the initial document notes Improper Neutralization of Input During Web Page Generation and specifies Bigmart Elements affected up to 1.0.3. Connected sources (Pat...