Lucene search
+L

1085 matches found

Vulnrichment
Vulnrichment
added 2024/02/05 9:21 p.m.20 views

CVE-2024-0585 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Filterable Gallery widget in all versions up to, and including, 5.9.4 due to insufficient input sanitization and...

5.4CVSS6.9AI score0.00402EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.8 views

WordPress plugin Essential Addons for Elementor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability in the WordPress...

5.4CVSS6.1AI score0.00402EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.6 views

WordPress plugin Essential Addons for Elementor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability in the WordPress...

6.5CVSS6.1AI score0.00402EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.10 views

WordPress plugin Essential Addons for Elementor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability in the...

6.4CVSS6AI score0.00423EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/05 12:0 a.m.7 views

PT-2024-15667 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor plugin for WordPress versions up to, and including, 5.9.4 Description: The issue is related to Stored Cross-Site Scripting via the Login/Register Element due to insufficient input sanitization and output...

6.5CVSS5.6AI score0.00402EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2024/02/02 12:0 a.m.15 views

WordPress Essential Addons for Elementor Plugin <= 5.9.7 is vulnerable to Cross Site Scripting (XSS)

Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.9.7 Fixed in 5.9.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0954 Patch priority Low CVSS severity Low 6.5 Developer WPDeveloper PSID a111b892d269 Credits Webbernaut...

6.4CVSS5.8AI score0.00423EPSS
SaveExploits0References3Affected Software1
Fedora
Fedora
added 2024/02/01 1:25 a.m.41 views

[SECURITY] Fedora 38 Update: glibc-2.37-18.fc38

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

8.4CVSS7.3AI score0.04794EPSS
SaveExploits9
HackRead
HackRead
added 2024/01/30 11:15 p.m.10 views

The Latest Identity Theft Methods: Essential Protection Strategies Revealed

By Waqas With the digital age in full swing, your personal information is more vulnerable than ever. Identity theft has… This is a post from HackRead.com Read the original post: The Latest Identity Theft Methods: Essential Protection Strategies Revealed...

7AI score
SaveExploits0
OSV
OSV
added 2024/01/15 4:15 p.m.9 views

CVE-2023-6623

The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks...

9.8CVSS5.8AI score0.50673EPSS
SaveExploits2References2
NVD
NVD
added 2024/01/15 4:15 p.m.32 views

CVE-2023-6623

The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks...

9.8CVSS9.4AI score0.50673EPSS
SaveExploits2References2
Prion
Prion
added 2024/01/15 4:15 p.m.23 views

Design/Logic Flaw

The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks...

7.5CVSS7AI score0.50673EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/15 3:10 p.m.8 views

CVE-2023-6623 Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion

The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks...

6.7AI score0.50673EPSS
SaveExploits2References2
CVE
CVE
added 2024/01/15 3:10 p.m.155 views

CVE-2023-6623

The CVE-2023-6623 entry corresponds to a Local File Inclusion vulnerability in the WordPress Essential Blocks plugin prior to version 4.4.3. Several connected sources confirm that unauthenticated attackers can overwrite local variables when rendering templates via the REST API, potentially enabli...

9.8CVSS9.2AI score0.50673EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
added 2024/01/15 12:0 a.m.9 views

WordPress Plugin Essential Blocks Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

9.8CVSS6.3AI score0.50673EPSS
SaveExploits2References3
ATTACKERKB
ATTACKERKB
added 2024/01/11 9:15 a.m.4 views

CVE-2023-7071

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all versions up to, and including, 4.4.6 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS5.6AI score0.00408EPSS
SaveExploits0References4
NVD
NVD
added 2024/01/11 9:15 a.m.29 views

CVE-2023-7071

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all versions up to, and including, 4.4.6 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS5.7AI score0.00408EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/01/11 8:33 a.m.39 views

CVE-2023-7071 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all versions up to, and including, 4.4.6 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS5.9AI score0.00408EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/01/11 12:0 a.m.8 views

WordPress Plugin Essential Blocks Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS6AI score0.00408EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/01/11 12:0 a.m.9 views

PT-2024-15199 · WordPress · The Essential Blocks – Page Builder Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress versions up to, and including, 4.4.6 Description: The issue is related to Stored Cross-Site Scripting via the Table of Contents block due to...

6.4CVSS5.7AI score0.00408EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2024/01/10 12:0 a.m.14 views

WordPress Essential Blocks for Gutenberg Plugin <= 4.4.6 is vulnerable to Cross Site Scripting (XSS)

Software Essential Blocks for Gutenberg Type Plugin Vulnerable versions = 4.4.6 Fixed in 4.4.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-7071 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fac9190f53e9 Credits Webbernau...

6.4CVSS5.8AI score0.00408EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder