WordPress Beauty theme <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via tpl_featured_cat_id Parameter vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via tplfeaturedcatid Parameter vulnerability discovered by Francesco Carlucci in WordPress Theme Beauty versions = 1.1.4...

PT-2024-37221 · WordPress · The Beauty Theme

Name of the Vulnerable Software and Affected Versions: The Beauty theme for WordPress versions up to, and including, 1.1.4 Description: The issue is related to Stored Cross-Site Scripting via the tpl featured cat id parameter due to insufficient input sanitization and output escaping. This allows...

CVE-2024-6929

The Dynamic Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dfiFeatured’ parameter in all versions up to, and including, 3.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Dynamic Featured Image plugin <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via dfiFeatured Parameter vulnerability discovered by vgo0 in WordPress Plugin Dynamic Featured Image versions = 3.7.0...

WordPress Dynamic Featured Image Plugin <= 3.7.0 is vulnerable to Cross Site Scripting (XSS)

Software Dynamic Featured Image Type Plugin Vulnerable versions = 3.7.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6929 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6e79732a35b3 Credits vgo0 Required...

WordPress plugin Dynamic Featured Image 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2024-37967 · WordPress · Dynamic Featured Image

Name of the Vulnerable Software and Affected Versions: Dynamic Featured Image plugin for WordPress versions up to, and including, 3.7.0 Description: The issue is related to Stored Cross-Site Scripting via the dfiFeatured parameter due to insufficient input sanitization and output escaping. This...

WordPress Auto Featured Image plugin <= 4.1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Auto Featured Image Auto Post Thumbnail versions = 4.1.2...

WordPress Auto Featured Image (Auto Post Thumbnail) Plugin <= 4.1.2 is vulnerable to Broken Access Control

Software Auto Featured Image Auto Post Thumbnail Type Plugin Vulnerable versions = 4.1.2 Fixed in 4.1.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38719 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 17fc0a0c63f8 Credits Joshu...

WordPress Featured Image Generator plugin <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Images Upload vulnerability

Missing Authorization to Authenticated Subscriber+ Images Upload vulnerability discovered by Lucio Sá in WordPress Plugin Featured Image Generator versions = 1.3.1...

WordPress plugin Featured Image Generator security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-5441

The Modern Events Calendar plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the setfeaturedimage function in all versions up to, and including, 7.11.0. This makes it possible for authenticated attackers, with subscriber access and above, to uploa...

VulnCheck KEV: CVE-2024-5441

The Modern Events Calendar plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the setfeaturedimage function in all versions up to, and including, 7.11.0. This makes it possible for authenticated attackers, with subscriber access and above, to...

WordPress Featured Image from URL (FIFU) plugin <= 4.8.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Featured Image from URL versions = 4.8.2...

WordPress Featured Image from URL Plugin <= 4.8.2 is vulnerable to Broken Access Control

Software Featured Image from URL Type Plugin Vulnerable versions = 4.8.2 Fixed in 4.8.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37516 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 819896bb0ba3 Credits Rafie Muhammad...

WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Featured Image from URL versions = 4.8.1...

WordPress Featured Image from URL Plugin <= 4.8.1 is vulnerable to Broken Access Control

Software Featured Image from URL Type Plugin Vulnerable versions = 4.8.1 Fixed in 4.8.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37276 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cc8f54a6d149 Credits Rafie Muhammad...

CVE-2024-6054

The Auto Featured Image plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'createpostattachmentfromurl' function in all versions up to, and including, 1.2. This makes it possible for authenticated attackers, with contributor-level and above...

CVE-2024-6054

The Auto Featured Image plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'createpostattachmentfromurl' function in all versions up to, and including, 1.2. This makes it possible for authenticated attackers, with contributor-level and above...

WordPress Plugin Auto Featured Image Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Auto Featured Image 1.2 an...