92 matches found
CVE-2024-47304
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjahan Jewel Fluent Support fluent-support allows SQL Injection.This issue affects Fluent Support: from n/a through = 1.8.0...
CVE-2024-47302
Missing Authorization vulnerability in WPManageNinja LLC Fluent Support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through 1.8.0...
CVE-2024-47302
Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through = 1.8.0...
CVE-2024-47302 WordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerability
Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through = 1.8.0...
WordPress plugin Fluent Support 安全漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists i...
PT-2024-32513 · Unknown · Fluent Support
Name of the Vulnerable Software and Affected Versions: Fluent Support versions 1.8.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.8.0 and...
CVE-2024-47304
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPManageNinja LLC Fluent Support allows SQL Injection.This issue affects Fluent Support: from n/a through 1.8.0...
CVE-2024-47304
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjahan Jewel Fluent Support fluent-support allows SQL Injection.This issue affects Fluent Support: from n/a through = 1.8.0...
CVE-2024-47304
Fluent Support (WordPress plugin)
WordPress plugin Fluent Support SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability...
PT-2024-32515 · Wpmanageninja Llc · Fluent Support
Name of the Vulnerable Software and Affected Versions: WPManageNinja LLC Fluent Support versions 1.8.0 and earlier Description: The issue is related to an SQL Injection vulnerability, which allows attackers to manipulate SQL commands. This poses a serious cybersecurity risk. Recommendations: For...
WordPress Fluent Support plugin <= 1.8.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Fluent Support versions = 1.8.0...
WordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerability
Broken Access Control on Email Verification vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Fluent Support versions = 1.8.0...
WordPress Fluent Support Plugin <= 1.8.0 is vulnerable to SQL Injection
Software Fluent Support Type Plugin Vulnerable versions = 1.8.0 Fixed in 1.8.1 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-47304 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 80896110802b Credits Khalid Yusuf Required privilege Subscriber...
WordPress Fluent Support Plugin <= 1.8.0 is vulnerable to Broken Access Control
Software Fluent Support Type Plugin Vulnerable versions = 1.8.0 Fixed in 1.8.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-47302 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 1b6430288129 Credits Khalid Yusuf Required privileg...
Fluent Support < 1.7.7 - Authenticated(Administrator+) SQL Injection
Description The Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin plugin for WordPress is vulnerable to SQL Injection via an unknown parameter in all versions up to 1.7.7 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...
CVE-2023-51547
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: from n/a through...
CVE-2023-51547 WordPress Fluent Support Plugin <= 1.7.6 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: from n/a through...
CVE-2023-51547
CVE-2023-51547 affects Fluent Support (WordPress plugin) up to version 1.7.6. It is an authenticated SQL Injection caused by improper neutralization of input in SQL commands. Impact per sources is high; patch status is Patched, but no fixed version is specified in the provided documents. Recommen...
PT-2023-31847 · WordPress · Fluent Support
Name of the Vulnerable Software and Affected Versions: Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin versions 1.7.6 and earlier Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL comman...