WordPress LH Copy Media File Plugin <= 1.08 is vulnerable to Cross Site Scripting (XSS)

Software LH Copy Media File Type Plugin Vulnerable versions = 1.08 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9220 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f98d57ff7d4d Credits Colin Xu Required...

CVE-2023-45753

Cross-Site Request Forgery CSRF vulnerability in Gilles Dumas which template file plugin = 4.6.0 versions...

CVE-2023-45753

Cross-Site Request Forgery CSRF vulnerability in Gilles Dumas which template file plugin = 4.6.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Gilles Dumas which template file plugin = 4.6.0 versions...

CVE-2023-45753

CVE-2023-45753 pertains to the WordPress plugin “which template file” (plugin versions

CVE-2023-45753: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Gilles Dumas which template file plugin = 4.6.0 versions...

CVE-2023-25489

Cross-Site Request Forgery CSRF vulnerability in Jeff Sherk Update Theme and Plugins from Zip File plugin = 2.0.0 versions...

CVE-2023-25489

Cross-Site Request Forgery CSRF vulnerability in Jeff Sherk Update Theme and Plugins from Zip File plugin = 2.0.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Jeff Sherk Update Theme and Plugins from Zip File plugin = 2.0.0 versions...

CVE-2023-25489

CVE-2023-25489 is a CSRF vulnerability in the WordPress plugin Update Theme and Plugins from Zip File (versions

CVE-2023-25489 WordPress Update Theme and Plugins from Zip File Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Jeff Sherk Update Theme and Plugins from Zip File plugin = 2.0.0 versions...

Wordpress plugin Organizer File file upload vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A file upload vulnerability exists in the Wordpress plugin Organizer File, which can be exploited by attackers to upload...

WordPress Plugin Work The Flow File Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Work The Flow File is a file upload plugin for Wordpress. A file upload vulnerability exists in the WordPress plugi...

CVE-2008-2510

CVE-2008-2510 is a SQL injection vulnerability in the WordPress Upload File plugin, specifically in wp-uploadfile.php, where the f_id parameter enables remote attackers to execute arbitrary SQL commands. The issue is documented across multiple sources (NVD/NVD list and patch coverage) as affectin...