CVE-2024-39001

The software ag-grid-enterprise v31.3.2 is vulnerable to prototype pollution via the component _ModuleSupport.jsonApply . An attacker can exploit this by injecting arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . No specific remediation or explo...

CVE-2024-38996

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the .mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

Malicious code in koi-grid (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2583 Malicious code in koi-grid (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ag-grid-react/lib (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-2484

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2024-2484

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

WordPress plugin Orbit Fox by ThemeIsle security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

CVE-2024-2484: Improper Neutralization of Input During Web Page Generation

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

PT-2024-20607

Name of the Vulnerable Software and Affected Versions The Orbit Fox by ThemeIsle plugin for WordPress versions up to, and including, 2.10.34 Description The issue is related to Stored Cross-Site Scripting via the Services and Post Type Grid widgets due to insufficient input sanitization and outpu...

PT-2024-10412

Name of the Vulnerable Software and Affected Versions wpWax Post Grid, Slider & Carousel Ultimate versions 1.6.10 and earlier Description The issue affects the wpWax Post Grid, Slider & Carousel Ultimate plugin for WordPress, allowing PHP Local File Inclusion due to improper control of filename f...

CVE-2023-47771

Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18...

CVE-2023-47771 WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability

Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18...

CVE-2023-47771 WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability

Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18...

WordPress plugin Essential Grid security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-13487

Name of the Vulnerable Software and Affected Versions Essential Grid versions 3.0.18 and earlier Description The issue is related to a Missing Authorization vulnerability in ThemePunch OHG Essential Grid. Recommendations For Essential Grid versions 3.0.18 and earlier, update to a version later th...

CVE-2023-47771: Missing Authorization

Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18...

CVE-2024-4305

The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Si...

CVE-2024-4305

The Post Grid Gutenberg Blocks and WordPress Blog Plugin (also known as PostX ) versions prior to 4.1.0 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly validate and escape certain block options before they are output to a page or post. This security fl...

CVE-2024-4305: Improper Neutralization of Input During Web Page Generation

The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Si...