60 matches found
PT-2025-33905 · Themegrill +1 · Themegrill-Demo-Importer +1
Name of the Vulnerable Software and Affected Versions: ColorMag versions prior to 4.0.20 Description: The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the welcome notice import handler function. This allows authenticated...
CVE-2023-25485
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bernhard Kux JSON Content Importer plugin = 1.3.15 versions...
CVE-2013-10027
A vulnerability was found in Blogger Importer Plugin up to 0.5 on WordPress. It has been classified as problematic. Affected is the function start/restart of the file blogger-importer.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Upgradin...
CVE-2019-16543
Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2024-13899
The Mambo Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0 via deserialization of untrusted input via the $data parameter in the fImportMenu function. This makes it possible for authenticated attackers, with Administrator-level access a...
CVE-2024-13899
CVE-2024-13899 affects the Mambo Importer plugin for WordPress (up to v1.0). It enables PHP Object Injection via deserialization of untrusted input in fImportMenu’s $data parameter. Exploitation requires Administrator-class access; no public POP chain is documented in the vulnerable package itsel...
WordPress plugin Mambo Importer 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
CVE-2024-55977 WordPress LaunchPage.app Importer plugin <= 1.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BinaryCarpenter LaunchPage.app Importer launchpage-app-importer allows SQL Injection.This issue affects LaunchPage.app Importer: from n/a through = 1.1...
WordPress plugin Easy CSV Importer BETA 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...
CVE-2023-49775 WordPress CSV Importer Plugin <= 0.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Denis Kobozev CSV Importer.This issue affects CSV Importer: from n/a through 0.3.8...
Cross site request forgery (csrf)
A vulnerability classified as problematic has been found in WP Ultimate CSV Importer Plugin 3.7.2 on WordPress. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.7.3 is able to address this...
CVE-2015-10125
CVE-2015-10125 affects the WP Ultimate CSV Importer Plugin for WordPress (v3.7.2). The vulnerability is described as cross-site request forgery (CSRF) in an unknown part of the plugin, with remote initiation possible. The issue is addressed by upgrading to version 3.7.3, and the patch identifier ...
CVE-2015-10125 WP Ultimate CSV Importer Plugin cross-site request forgery
A vulnerability classified as problematic has been found in WP Ultimate CSV Importer Plugin 3.7.2 on WordPress. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.7.3 is able to address this...
The vulnerability of the start/restart function (blogger-importer.php) of the Blogger Importer plugin, a content management system for WordPress websites, allows a hacker to perform a CSRF attack.
The vulnerability of the start/restart function in the Blogger Importer plugin for WordPress content management system is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
CVE-2013-10027
A vulnerability was found in Blogger Importer Plugin up to 0.5 on WordPress. It has been classified as problematic. Affected is the function start/restart of the file blogger-importer.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Upgradin...
Cross site request forgery (csrf)
A vulnerability was found in Blogger Importer Plugin up to 0.5 on WordPress. It has been classified as problematic. Affected is the function start/restart of the file blogger-importer.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Upgradin...
CVE-2013-10027 Blogger Importer Plugin blogger-importer.php restart cross-site request forgery
A vulnerability was found in Blogger Importer Plugin up to 0.5 on WordPress. It has been classified as problematic. Affected is the function start/restart of the file blogger-importer.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Upgradin...
PT-2023-3567 · WordPress · Blogger Importer Plugin
Name of the Vulnerable Software and Affected Versions: Blogger Importer Plugin versions up to 0.5 Description: The issue is related to the function start/restart of the file blogger-importer.php, which is vulnerable to cross-site request forgery CSRF attacks. This can be exploited remotely,...
