2964 matches found
PT-2019-7795
Name of the Vulnerable Software and Affected Versions Elegant Themes Extra theme versions prior to 1.2.4 Description The issue allows for privilege escalation. Recommendations For versions prior to 1.2.4, update to version 1.2.4 or later to resolve the issue...
CVE-2016-11002: Improper Privilege Management
The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation...
CVE-2019-16250
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...
CVE-2019-16250
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...
Design/Logic Flaw
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...
CVE-2019-16250
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...
CVE-2019-16250
CVE-2019-16250 affects the WordPress plugin Ocean Extra (
WordPress Ocean Extra plugin input validation error vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ocean Extra is a plugin used to add extensions to the Ocean theme. An input validation error vulnerability exists in the...
PT-2019-14600
Name of the Vulnerable Software and Affected Versions Ocean Extra plugin versions through 1.5.8 for WordPress Description The issue allows unauthenticated changes to options and injection of a Cascading Style Sheets CSS token sequence in the includes/wizard/wizard.php file. Recommendations For...
CVE-2019-16250: Improper Authentication
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...
CVE-2019-2121
In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Andro...
Google Chrome 74.0.3729.0 / 76.0.3789.0 - Heap Use-After-Free Exploit
Google Chrome 74.0.3729.0 / 76.0.3789.0 - Heap Use-After-Free in blink::PresentationAvailabilityState::UpdateAvailability iterating&iteratinglisteners, true; for auto& listenerref : availabilitylisteners auto listener = listenerref.get; if !listener-urls.Containsurl continue; auto...
CVE-2018-18670
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/configformupdate.php cf110 parameter...
CVE-2018-18670
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/configformupdate.php cf110 parameter...
Code injection
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/configformupdate.php cf110 parameter...
CVE-2018-18670
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/configformupdate.php cf110 parameter...
PT-2019-9616 · Gnuboard · Gnuboard5
Name of the Vulnerable Software and Affected Versions: GNUBOARD5 version 5.3.1.9 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the Extra Contents parameter, also known as the cf 110 parameter in the adm/config form update.php file. This enables attacker...
CVE-2018-18670: Improper Neutralization of Input During Web Page Generation
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/configformupdate.php cf110 parameter...
Ocean Extra <= 1.5.8 - Unauthenticated Settings change and CSS injection
The Ocean Extra WordPress plugin was affected by an Unauthenticated Settings change and CSS injection security vulnerability...
WordPress Ocean Extra plugin <= 1.5.8 - Unauthenticated Settings change vulnerability
Unauthenticated Settings change vulnerability found by Jerome Bruandet in WordPress Ocean Extra plugin versions = 1.5.8. Solution Update the WordPress Ocean Extra plugin to the latest available version at least 1.5.9...