CVE-2024-13260 Migrate queue importer - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-024

Cross-Site Request Forgery CSRF vulnerability in Drupal Migrate queue importer allows Cross Site Request Forgery.This issue affects Migrate queue importer: from 0.0.0 before 2.1.1...

CVE-2024-13260

CVE-2024-13260 describes a Cross-Site Request Forgery in the Drupal Migrate queue importer module. The flaw affects the module versions from 0.0.0 up to 2.1.1 and stems from insufficient CSRF protection when performing cron migrations. Exploitation context in the public docs indicates an attacker...

CVE-2024-13260 Migrate queue importer - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-024

Cross-Site Request Forgery CSRF vulnerability in Drupal Migrate queue importer allows Cross Site Request Forgery.This issue affects Migrate queue importer: from 0.0.0 before 2.1.1...

CVE-2024-13260 Migrate queue importer - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-024

Cross-Site Request Forgery CSRF vulnerability in Drupal Migrate queue importer allows Cross Site Request Forgery.This issue affects Migrate queue importer: from 0.0.0 before 2.1.1...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Migrate queue importer prior to version 2.1.1, which stems from the inclusion of a cross-site request forgery vulnerability...

AZL-54527 CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.55.0-22

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54440 CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.57.0-8

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2024-56004

Missing Authorization vulnerability in awfowler Easy Site Importer easy-site-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Site Importer: from n/a through = 1.0.1...

CVE-2024-55977

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BinaryCarpenter LaunchPage.app Importer launchpage-app-importer allows SQL Injection.This issue affects LaunchPage.app Importer: from n/a through = 1.1...

CVE-2024-54432

Cross-Site Request Forgery CSRF vulnerability in Shambhu Patnaik WP Flipkart Importer wp-flipkart-importer allows Stored XSS.This issue affects WP Flipkart Importer: from n/a through = 1.4...

CVE-2024-55977 WordPress LaunchPage.app Importer plugin <= 1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in launch-page-importer LaunchPage.app Importer allows SQL Injection.This issue affects LaunchPage.app Importer: from n/a through 1.1...

CVE-2024-55977 WordPress LaunchPage.app Importer plugin <= 1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BinaryCarpenter LaunchPage.app Importer launchpage-app-importer allows SQL Injection.This issue affects LaunchPage.app Importer: from n/a through = 1.1...

CVE-2024-54432

CVE-2024-54432 describes a CSRF to Stored XSS in the WordPress plugin WP Flipkart Importer. The vulnerability affects WP Flipkart Importer versions from and including 1.0 up to 1.4 (as cited). The CVE entry lists a CVSS v3.1 base score of 7.1 (HIGH) with network attack vector, no privileges requi...

CVE-2024-56004

CVE-2024-56004 is a Missing Authorization vulnerability in the Easy Site Importer WordPress plugin (versions up to 1.0.1). It allows authenticated users (Subscriber+) to modify plugin settings due to insufficient access control. Connected sources confirm the issue and indicate no public patch det...

CVE-2024-56004 WordPress Easy Site Importer plugin <= 1.0.1 - Settings Change vulnerability

Missing Authorization vulnerability in awfowler Easy Site Importer easy-site-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Site Importer: from n/a through = 1.0.1...

WordPress plugin WP Flipkart Importer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

WordPress plugin LaunchPage.app Importer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A SQL injection...

WordPress plugin Easy Site Importer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-36658 · Unknown · Alex W Fowler Easy Site Importer

Name of the Vulnerable Software and Affected Versions: Alex W Fowler Easy Site Importer versions n/a through 1.0.1 Description: The issue is related to a missing authorization vulnerability in Alex W Fowler Easy Site Importer, which allows exploiting incorrectly configured access control security...

WordPress Easy Site Importer plugin <= 1.0.1 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Easy Site Importer versions = 1.0.1...