CVE-2022-0478

The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the postauthorgutenberg parameter before using it in a SQL statement when creating/editing events, which could allow users with a role as low as contributor to perform SQL Injection...

WordPress plugin WooCommerce SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. SQL injection vulnerability exists in versions of...

WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting

Description Post authors are able to bypass KSES restrictions in WordPress = 5.9 and or Gutenberg = 9.8.0 due to the order filters are executed, which could allow them to perform to Stored Cross-Site Scripting attacks PoC As a user without the UNFILTEREDHTML capability, create a post containing t...

WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting

Description Post authors are able to bypass KSES restrictions in WordPress = 5.9 and or Gutenberg = 9.8.0 due to the order filters are executed, which could allow them to perform to Stored Cross-Site Scripting attacks As a user without the UNFILTEREDHTML capability, create a post containing the...

WordPress Gutenberg plugin <= 12.7.1 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Ben Bidner in WordPress Gutenberg plugin versions = 12.7.1. Solution Update the WordPress Gutenberg plugin to the latest available version at least 12.7.2...

WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package

Description The @wordpress/url package used in WordPress and the Gutenberg plugin is affected by a Prototype Pollution issue...

WordPress FAQ Manager For Divi, Gutenberg Block & Shortcode plugin <= 5.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress FAQ Manager For Divi, Gutenberg Block & Shortcode plugin versions = 5.4.0. Solution Update the WordPress FAQ Manager For Divi, Gutenberg Block & Shortcode plugin to the latest available version at leas...

WordPress FAQ Manager For Divi, Gutenberg Block & Shortcode plugin <= 5.4.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress FAQ Manager For Divi, Gutenberg Block & Shortcode plugin versions = 5.4.0. Solution Update the WordPress FAQ Manager For Divi, Gutenberg Block & Shortcode plugin to the latest available version at least 5.4.1...

WordPress Pinblocks — Gutenberg blocks with Pinterest widgets plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pinblocks — Gutenberg blocks with Pinterest widgets plugin versions = 1.0.2. Solution No patched version available...

WordPress Convert Classic Editor to Gutenberg Blocks plugin <= 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Convert Classic Editor to Gutenberg Blocks plugin versions = 1.0.6. Solution No patched version available...

WordPress WP Custom field for Gutenberg Editor plugin <= 1.7.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Custom field for Gutenberg Editor plugin versions = 1.7.1. Solution No patched version available...

WordPress Ultimate Blocks – Gutenberg Blocks Plugin plugin < 2.4.13 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ultimate Blocks – Gutenberg Blocks Plugin plugin versions 2.4.13. Solution Update the WordPress Ultimate Blocks – Gutenberg Blocks Plugin plugin to the latest available version at least 2.4.13...

WordPress Stackable – Page Builder Gutenberg Blocks plugin < 3.1.5 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Stackable – Page Builder Gutenberg Blocks plugin versions 3.1.5. Solution Update the WordPress Stackable – Page Builder Gutenberg Blocks plugin to the latest available version at least 3.1.5...

WordPress BlockyPage – Gutenberg Based Page Builder plugin <= 1.2.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress BlockyPage – Gutenberg Based Page Builder plugin versions = 1.2.4. Solution No patched version available...

WordPress Pinblocks — Gutenberg blocks with Pinterest widgets plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Pinblocks — Gutenberg blocks with Pinterest widgets plugin versions = 1.0.2. Solution No patched version available...

WordPress Convert Classic Editor to Gutenberg Blocks plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Convert Classic Editor to Gutenberg Blocks plugin versions = 1.0.6. Solution No patched version available...

WordPress WP Munich Blocks – Gutenberg Blocks for WordPress plugin < 0.11.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Munich Blocks – Gutenberg Blocks for WordPress plugin versions 0.11.0. Solution Update the WordPress WP Munich Blocks – Gutenberg Blocks for WordPress plugin to the latest available version at least 0.11.0...

WordPress Best Responsive Comparison Table for Gutenberg Editor – NicheTable plugin <= 2.2.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Best Responsive Comparison Table for Gutenberg Editor – NicheTable plugin versions = 2.2.0. Solution Update the WordPress Best Responsive Comparison Table for Gutenberg Editor – NicheTable plugin to the latest available versio...

WordPress Blocks Bakery – Gutenberg Blocks plugin <= 1.0.12 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Blocks Bakery – Gutenberg Blocks plugin versions = 1.0.12. Solution No patched version available...

WordPress SKT Templates – Elementor & Gutenberg templates plugin <= 4.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SKT Templates – Elementor & Gutenberg templates plugin versions = 4.2. Solution Update the WordPress SKT Templates – Elementor & Gutenberg templates plugin to the latest available version at least 4.3...