13 matches found
CVE-2026-4021: Improper Authentication
The Contest Gallery plugin for WordPress is vulnerable to an authentication bypass leading to admin account takeover in all versions up to, and including, 28.1.5. This is due to the email confirmation handler in users-registry-check-after-email-or-pin-confirmation.php using the user's email strin...
CVE-2025-12040: Authorization Bypass Through User-Controlled Key
The Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.3 via several functions in class-th-wishlist-frontend.php due to missing validation on a user controlled key. This makes it possible for unauthenticated...
CVE-2024-10319: Exposure of Sensitive Information to an Unauthorized Actor
The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the render function in widgets/content-toggle/layout/frontend.php. This makes it possible for authenticated attackers, with...
PT-2024-16184
Name of the Vulnerable Software and Affected Versions The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress versions up to, and including, 1.4.6 Description The issue is related to Sensitive Information Exposure, which makes it possible for authenticated attackers with...
Server-Side Request Forgery
seo-by-rank-math is vulnerable to server-side request forgery. The vulnerability exists in the archiveredirect function in class-frontend.php because it doesn't properly validate urls which allows a remote attacker to cause an ssrf bypass via a crafted url...
CVE-2022-1961
The Google Tag Manager for WordPress GTM4WP plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the gtm4wp-optionsscroller-contentid parameter found in the /public/frontend.php file which allowed attackers with administrative user access to inject arbitrary web...
Cross site scripting
The Google Tag Manager for WordPress GTM4WP plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the gtm4wp-optionsscroller-contentid parameter found in the /public/frontend.php file which allowed attackers with administrative user access to inject arbitrary web...
CVE-2022-1961
The Google Tag Manager for WordPress GTM4WP plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the "gtm4wp-optionsscroller-contentid" parameter found in the "/public/frontend.php" file which allowed attackers with administrative user access to inject arbitrary we...
CVE-2022-1707: Improper Neutralization of Input During Web Page Generation
The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is /public/frontend.ph...
CVE-2022-1961: Improper Neutralization of Input During Web Page Generation
The Google Tag Manager for WordPress GTM4WP plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the gtm4wp-optionsscroller-contentid parameter found in the /public/frontend.php file which allowed attackers with administrative user access to inject arbitrary web...
Cross-site Request Forgery (CSRF)
bolt/bolt is vulnerable to cross-site request forgery. The vulnerability exists as it accepts requests without a valid token in the preview generating endpoint in src/Controller/Frontend.php which allows an attacker to inject and execute arbitrary javascript...
beafordoldarchive.org.uk XSS vulnerability
Open Bug Bounty ID: OBB-364036 Description| Value ---|--- Affected Website:| beafordoldarchive.org.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...
