778 matches found
CVE-2024-10825
The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL in all versions up to, and including, 5.3.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-10825
The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL in all versions up to, and including, 5.3.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-10825
CVE-2024-10825 affects WordPress plugin Hide My WP Ghost – Security & Firewall (WP Ghost). Impact: Reflected Cross-Site Scripting via the URL in all versions up to 5.3.01 due to insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject arbitrary scripts int...
CVE-2024-10825 Hide My WP Ghost – Security & Firewall <= 5.3.01 - Reflected Cross-Site Scripting via URL
The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL in all versions up to, and including, 5.3.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
PT-2024-16574 · WordPress · Hide My Wp Ghost
Name of the Vulnerable Software and Affected Versions: Hide My WP Ghost – Security & Firewall plugin for WordPress versions up to, and including, 5.3.01 Description: The issue is related to Reflected Cross-Site Scripting via the URL due to insufficient input sanitization and output escaping. This...
WordPress Hide My WP Ghost plugin <= 5.3.01 - Reflected Cross-Site Scripting via URL vulnerability
Reflected Cross-Site Scripting via URL vulnerability discovered by Peter Thaleikis in WordPress Plugin Hide My WP Ghost versions = 5.3.01...
WordPress Hide My WP Ghost Plugin <= 5.3.01 is vulnerable to Cross Site Scripting (XSS)
Software Hide My WP Ghost Type Plugin Vulnerable versions = 5.3.01 Fixed in 5.3.02 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10825 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3f125ce149ef Credits Peter Thaleiki...
CVE-2024-9578
The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to doshortcode being hooked through the commenttext filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the...
CVE-2024-9578
CVE-2024-9578 : The Hide Links WordPress plugin is vulnerable in all versions up to and including 1.4.2, allowing unauthenticated attackers to execute arbitrary shortcodes by abusing do_shortcode via the comment_text filter. Impact is unauthenticated shortcode execution on the target site. Remedi...
CVE-2024-9578 Hide Links <= 1.4.2 - Unauthenticated Shortcode Execution
The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to doshortcode being hooked through the commenttext filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the...
CVE-2024-9578 Hide Links <= 1.4.2 - Unauthenticated Shortcode Execution
The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to doshortcode being hooked through the commenttext filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the...
WordPress plugin Hide Links 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2024-39697 · WordPress · Hide Links
Name of the Vulnerable Software and Affected Versions: The Hide Links plugin for WordPress versions up to and including 1.4.2 Description: The issue allows unauthorized shortcode execution due to do shortcode being hooked through the comment text filter. This enables unauthenticated attackers to...
WordPress Hide Links plugin <= 1.4.2 - Unauthenticated Shortcode Execution vulnerability
Unauthenticated Shortcode Execution vulnerability discovered by Francesco Carlucci in WordPress Plugin Hide Links versions = 1.4.2...
kernel: drm/fbdev-dma: Only set smem_start is enable per module option
In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Only set smemstart is enable per module option Only export struct fbinfo.fix.smemstart if that is required by the user and the memory does not come from vmalloc. Setting struct fbinfo.fix.smemstart breaks systems...
WordPress Hide Links Plugin <= 1.4.2 is vulnerable to Broken Authentication
Software Hide Links Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9578 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 4b4a91ec2385 Credits Francesco...
WordPress Persian Nested Show/Hide Text Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)
Software Persian Nested Show/Hide Text Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51831 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 841990db88af Credits SOPROBRO Required privilege...
WordPress Flash Show And Hide Box plugin <= 1.6 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Flash Show And Hide Box versions = 1.6...
WordPress Flash Show And Hide Box Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software Flash Show And Hide Box Type Plugin Vulnerable versions = 1.6 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51656 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 61be485fbb22 Credits SOPROBRO Requir...
