CVE-2024-6571 Optimize Images ALT Text (alt tag) & names for SEO using AI <= 3.1.1 - Unauthenticated Full Path Disclosure

The Optimize Images ALT Text alt tag & names for SEO using AI plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.1.1. This is due the plugin utilizing cocur and not preventing direct access to the generate-default.php file. This makes it possible fo...

CVE-2024-6571

CVE-2024-6571 affects the WordPress plugin that optimizes image ALT text and names for SEO using AI. The issue is a Full Path Disclosure in versions up to and including 3.1.1 caused by the plugin not preventing direct access to generate-default.php, enabling unauthenticated retrieval of the web a...

CVE-2024-6571 Optimize Images ALT Text (alt tag) & names for SEO using AI <= 3.1.1 - Unauthenticated Full Path Disclosure

The Optimize Images ALT Text alt tag & names for SEO using AI plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.1.1. This is due the plugin utilizing cocur and not preventing direct access to the generate-default.php file. This makes it possible fo...

CVE-2024-6553 WP Meteor Website Speed Optimization Addon <= 3.4.3 - Unauthenticated Full Path Disclosure

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.3.This is due to the plugin utilizing wpdesk and leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to...

CVE-2024-6553

Summary of CVE-2024-6553 : The WP Meteor Website Speed Optimization Addon for WordPress is vulnerable to Full Path Disclosure in all versions up to and including 3.4.3. Root cause: the plugin uses wpdesk and leaves test files with display_errors enabled, allowing unauthenticated access to the web...

CVE-2024-6553 WP Meteor Website Speed Optimization Addon <= 3.4.3 - Unauthenticated Full Path Disclosure

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.3.This is due to the plugin utilizing wpdesk and leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to...

WordPress Optimize Images ALT Text (alt tag) & names for SEO using AI plugin <= 3.1.1 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Optimize images ALT Text alt tag & names for SEO using AI versions = 3.1.1...

WordPress WP Meteor Website Speed Optimization Addon plugin <= 3.4.3 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin WP Meteor Page Speed Optimization Topping versions = 3.4.3...

PT-2024-37727 · WordPress · Optimize Images Alt Text (Alt Tag) & Names For Seo Using Ai

Name of the Vulnerable Software and Affected Versions: Optimize Images ALT Text alt tag & names for SEO using AI plugin for WordPress versions up to, and including, 3.1.1 Description: The plugin is vulnerable to Full Path Disclosure due to its utilization of cocur and failure to prevent direct...

PT-2024-37710 · WordPress · Wp Meteor Website Speed Optimization Addon

Name of the Vulnerable Software and Affected Versions: WP Meteor Website Speed Optimization Addon plugin for WordPress versions up to, and including, 3.4.3 Description: The issue is related to Full Path Disclosure, which occurs because the plugin utilizes wpdesk and leaves test files with display...

WordPress plugin Optimize Images ALT Text & names for SEO using AI 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Optimize Images ALT...

WordPress Addonify plugin <= 1.2.16 - Unauthenticated Full Path Dislcosure vulnerability

Unauthenticated Full Path Dislcosure vulnerability discovered by stealthcopter in WordPress Plugin Addonify versions = 1.2.16...

CVE-2024-6560

The Addonify – Quick View For WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.16. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possible for unauthenticated attackers to...

CVE-2024-6560 Addonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure

The Addonify – Quick View For WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.16. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possible for unauthenticated attackers to...

CVE-2024-6560 Addonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure

The Addonify – Quick View For WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.16. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possible for unauthenticated attackers to...

CVE-2024-6560

The CVE-2024-6560 entry concerns Addonify – Quick View For WooCommerce for WordPress. Affected versions: all up to 1.2.16. Root cause: the plugin uses mobiledetect without preventing direct access to its files, enabling unauthenticated full path disclosure. Impact: disclosed server path informati...

PT-2024-37717 · WordPress · Addonify – Quick View For Woocommerce

Name of the Vulnerable Software and Affected Versions: Addonify – Quick View For WooCommerce plugin for WordPress versions up to, and including, 1.2.16 Description: The issue is related to Full Path Disclosure, which occurs because the plugin utilizes mobiledetect without preventing direct access...

CVE-2024-6565

The AForms — Form Builder for Price Calculator & Cost Estimation plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.6. This is due to the plugin utilizing the aura library and allowing direct access to the phpunit test files. This makes it possibl...

CVE-2024-6570

The Glossary plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.26. This is due the plugin utilizing wpdesk and not preventing direct access to the test files along with displayerrors being enabled. This makes it possible for unauthenticated...

CVE-2024-6565

CVE-2024-6565 (AForms – Form Builder for Price Calculator & Cost Estimation, WordPress) is an information disclosure vulnerability in all versions up to 2.2.6, caused by the plugin’s use of the aura library and direct access to phpunit test files, enabling unauthenticated full path disclosure. Pu...