778 matches found
Exploit for Incorrect Authorization in Wpserveur Wps_Hide_Login
Badges !MIT Licensehttps://img.shields.io/badge/Licens...
WordPress plugin Tutor LMS 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-33683
Cross-Site Request Forgery CSRF vulnerability in WP Republic Hide Dashboard Notifications.This issue affects Hide Dashboard Notifications: from n/a through 1.2.3...
CVE-2024-33683 WordPress Hide Dashboard Notifications plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in WP Republic Hide Dashboard Notifications.This issue affects Hide Dashboard Notifications: from n/a through 1.2.3...
CVE-2024-33683
CVE-2024-33683 is a CSRF vulnerability in the WordPress plugin WP Republic Hide Dashboard Notifications , affecting version range including up to 1.2.3. The issue, described in connected Red Hat and PatchStack context, is a cross-site request forgery in the plugin’s handling of dashboard notices....
CVE-2024-33683 WordPress Hide Dashboard Notifications plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in WP Republic Hide Dashboard Notifications.This issue affects Hide Dashboard Notifications: from n/a through 1.2.3...
WordPress Hide Dashboard Notifications plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Hide Dashboard Notifications versions = 1.2.3...
WordPress plugin Hide Dashboard Notifications 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
PT-2024-3145 · Tutor Lms · Tutor Lms
Name of the Vulnerable Software and Affected Versions: Tutor LMS versions up to, and including, 2.6.2 Description: The issue is related to a missing capability check on the hide notices function, which allows unauthorized modification of data. This makes it possible for unauthenticated attackers ...
PT-2024-18323 · WordPress · Product Sort/Display For Woocommerce
Name of the Vulnerable Software and Affected Versions: Product Sort and Display for WooCommerce plugin for WordPress versions up to, and including, 2.4.1 Description: The issue is related to a missing capability check on the psad update product cat custom meta ajax function, allowing unauthorized...
WordPress Hide My WP < 6.2.9 - Unauthenticated SQL injection Vulnerability
Exploit Title: Wordpress Plugin Hide My WP 6.2.9 - Unauthenticated SQLi Original Researcher: Xenofon Vassilakopoulos Exploit Author: Xenofon Vassilakopoulos Submitter: Xenofon Vassilakopoulos Vendor Homepage: https://wpwave.com/ Version: Hide My WP v6.2.8 and prior Tested on: Hide My WP v6.2.7...
WordPress WPS Hide Login Plugin <= 1.9.11 is vulnerable to Bypass Vulnerability
Software WPS Hide Login Type Plugin Vulnerable versions = 1.9.11 Fixed in 1.9.12 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-49748 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID b95951ba6ec7 Credits Naveen Muthusamy Required privilege...
How to hide desktop viewer toolbar
Instructions on how to hide desktop viewer toolbar...
EasyImages Path Traversal Vulnerability
EasyImages is a thin wrapper on PIL by Jakub Cieslik individual developer. It is used for exploring, visualizing and sharing images. A path traversal vulnerability exists in icret EasyImages version 2.8.3, which stems from unknown code in app/hide.php that causes path traversal via the parameter...
PT-2023-32872 · Unknown · Icret Easyimages
Name of the Vulnerable Software and Affected Versions: icret EasyImages version 2.8.3 Description: A problematic vulnerability was found in icret EasyImages, affecting unknown code of the file app/hide.php. The manipulation of the key argument leads to path traversal, allowing an attacker to acce...
CVE-2023-5940
The WP Not Login Hide WPNLH WordPress plugin through 1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-5940
CVE-2023-5940 affects the WP Not Login Hide (WPNLH) WordPress plugin up to version 1.0. The issue is stored XSS in the plugin settings: an admin (high privilege) could inject payloads via the WPNLH Settings warning message field, potentially triggering stored XSS for authenticated users (includin...
LWS Hide Login < 2.1.9 - Protection Mechanism Bypass
Description The LWS Hide Login plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 2.1.8. This is due to the fact that attackers can bypass the hidden login page by visiting install.php. This makes it possible for unauthenticated attackers to...
WordPress Hide login page Plugin <= 1.1.9 is vulnerable to Bypass Vulnerability
Software Hide login page Type Plugin Vulnerable versions = 1.1.9 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-48335 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID b14b2f707de8 Credits Naveen Muthusamy Required privilege...