CVE-2024-56230 WordPress Dynamic Product Category Grid, Slider for WooCommerce plugin <= 1.1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dynamic Web Lab Dynamic Product Category Grid, Slider for WooCommerce allows PHP Local File Inclusion.This issue affects Dynamic Product Category Grid, Slider for WooCommerce: fr...

PT-2024-36766 · Woocommerce · Dynamic Product Category Grid

Name of the Vulnerable Software and Affected Versions: Dynamic Product Category Grid, Slider for WooCommerce versions 1.1.3 and earlier Description: The issue is related to improper control of filename for Include/Require Statement in PHP Program, allowing PHP Local File Inclusion. This problem c...

WordPress Post Grid Elementor Addon plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Post Grid Elementor Addon versions = 2.0.18...

WordPress Dynamic Product Category Grid, Slider for WooCommerce plugin <= 1.1.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Dynamic Product Category Grid, Slider for WooCommerce versions = 1.1.3...

Malicious code in grid-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3f459ed60b15a8a5c508fed9f7ebd2f7707ebbb1420e814add93920322749ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11989 Malicious code in grid-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3f459ed60b15a8a5c508fed9f7ebd2f7707ebbb1420e814add93920322749ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-54408

Cross-Site Request Forgery CSRF vulnerability in codehandling Youtube Video Grid youmax-channel-embeds-for-youtube-businesses allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through = 1.9...

CVE-2024-54408 WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jake H. Youtube Video Grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through 1.9...

CVE-2024-54408 WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in codehandling Youtube Video Grid youmax-channel-embeds-for-youtube-businesses allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through = 1.9...

CVE-2024-54408

CVE-2024-54408 affects Youmax Channel Embeds for YouTube Businesses (Youtube Video Grid) via Cross-Site Request Forgery. Public details show a CSRF vulnerability caused by incorrectly configured access control, enabling settings changes via CSRF for Youtube Video Grid: from n/a through

PT-2024-36295 · Unknown · Youtube Video Grid

Name of the Vulnerable Software and Affected Versions: Jake H. Youtube Video Grid versions n/a through 1.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can be exploited due to incorrectly configured access control security levels. This allows for the...

WordPress plugin Youtube Video Grid 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2023-34014

Missing Authorization vulnerability in G5Theme Grid Plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grid Plus: from n/a through 1.3.2...

CVE-2023-34014

Missing Authorization vulnerability in g5theme Grid Plus grid-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grid Plus: from n/a through = 1.3.2...

CVE-2023-34014

CVE-2023-34014 affects the WordPress Grid Plus plugin ≤ 1.3.2. The root cause is a missing authorization check (Broken Access Control), with CVSS v3.1 base score 5.4 (Medium). Patchstack notes a fix in 1.3.3; older versions are at risk due to misconfigured access control. Exploitation details are...

CVE-2023-34014 WordPress Grid Plus plugin <= 1.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in G5Theme Grid Plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grid Plus: from n/a through 1.3.2...

CVE-2023-34014 WordPress Grid Plus plugin <= 1.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in g5theme Grid Plus grid-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grid Plus: from n/a through = 1.3.2...

WordPress plugin Grid Plus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-12461 · Unknown · G5Theme Grid Plus

Name of the Vulnerable Software and Affected Versions: G5Theme Grid Plus versions 1.3.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.3.2 and...

WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

CSRF to Settings Change vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Youtube Video Grid versions = 1.9...