Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keyword

The plugin does not escape the keyword parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in pages containing a Post Grid with a search form PoC Append the following payload on a page containing a Post Grid with a search form:...

WordPress Post Grid plugin <= 2.1.15 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability via keyword discovered by JrXnm in WordPress Post Grid plugin versions = 2.1.15. Solution Update the WordPress Post Grid plugin to the latest available version at least 2.1.16...

OESA-2022-1570 virglrenderer security update

The virgil3d rendering library is a library used by qemu to implement 3D GPU support for the virtio GPU. Security Fixes: A NULL pointer dereference in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without...

Cross-site Scripting (XSS) - Stored

Description Stored XSS in parameter Name when save Grid Options Proof of Concept // PoC.req POST /admin/object-helper/grid-save-column-config HTTP/1.1 Host: 10.x-dev.pimcore.fun Cookie: PHPSESSID=cef9a977bc8ae8591f7b3b14bcafedf4; pimcoreadminsid=1;...

WordPress Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio plugin <= 2.1.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio plugin versions = 2.1.6. Solution Update the WordPress Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio plugin to the late...

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.5.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.5.4. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at least 3.5.5...

WordPress DeMomentSomTres Grid Archive plugin <= 2.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress DeMomentSomTres Grid Archive plugin versions = 2.1. Solution No patched version available...

WordPress DeMomentSomTres Grid Archive plugin <= 2.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress DeMomentSomTres Grid Archive plugin versions = 2.1. Solution No patched version available...

WordPress HM Logo Showcase – Slider & Grid plugin < 1.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress HM Logo Showcase – Slider & Grid plugin versions 1.9. Solution Update the WordPress HM Logo Showcase – Slider & Grid plugin to the latest available version at least 1.9...

WordPress Pretty Grid – Social Feed Gallery Plugin plugin < 1.0.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Pretty Grid – Social Feed Gallery Plugin plugin versions 1.0.8. Solution Update the WordPress Pretty Grid – Social Feed Gallery Plugin plugin to the latest available version at least 1.0.8...

WordPress HM Logo Showcase – Slider & Grid plugin < 1.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress HM Logo Showcase – Slider & Grid plugin versions 1.9. Solution Update the WordPress HM Logo Showcase – Slider & Grid plugin to the latest available version at least 1.9...

WordPress Grid & Styler For Contact Form 7 And Divi plugin <= 1.4.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Grid & Styler For Contact Form 7 And Divi plugin versions = 1.4.0. Solution Update the WordPress Grid & Styler For Contact Form 7 And Divi plugin to the latest available version at least 1.4.1...

WordPress Post Grid for Elementor & Product Grid | PowerGrids plugin <= 1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Post Grid for Elementor & Product Grid | PowerGrids plugin versions = 1.1. Solution Update the WordPress Post Grid for Elementor & Product Grid | PowerGrids plugin to the latest available version at least 1.1.1...

WordPress Post Grid for Elementor & Product Grid | PowerGrids plugin <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Post Grid for Elementor & Product Grid | PowerGrids plugin versions = 1.1. Solution Update the WordPress Post Grid for Elementor & Product Grid | PowerGrids plugin to the latest available version at...

WordPress Pretty Grid – Social Feed Gallery Plugin plugin < 1.0.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pretty Grid – Social Feed Gallery Plugin plugin versions 1.0.8. Solution Update the WordPress Pretty Grid – Social Feed Gallery Plugin plugin to the latest available version at least 1.0.8...

WordPress Royal Elementor Addons (Header Footer Builder, Popups, Post Grid, Woocommerce Product Grid, Slider, Parallax Image, Free Elementor Widgets & Elementor Templates) plugin <= 1.3.32 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Royal Elementor Addons Header Footer Builder, Popups, Post Grid, Woocommerce Product Grid, Slider, Parallax Image, Free Elementor Widgets & Elementor Templates plugin versions = 1.3.32. Solution Update the WordPress Royal...

Russia Sanctions May Spark Escalating Cyber Conflict

President Biden joined European leaders this week in enacting economic sanctions against Russia in response to its invasion of Ukraine. The West has promised tougher sanctions are coming, but experts warn these will almost certainly trigger a Russian retaliation against America and its allies,...

WordPress插件Image Photo Gallery Final Tiles Grid跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blogging sites on servers with PHP and MySQL.A cross-site scripting vulnerability exists in versions of the WordPress plugin Image Photo Galle...

CVE-2022-0186

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard...

CVE-2022-0186 Image Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard...