76 matches found
CVE-2016-15040
The Kento Post View Counter plugin for WordPress is vulnerable to SQL Injection via the 'kentopvcgeo' parameter in versions up to, and including, 2.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...
CVE-2016-15040
The Kento Post View Counter plugin for WordPress is vulnerable to SQL Injection in versions up to and including 2.8 . The flaw exists because the 'kento_pvc_geo' parameter lacks sufficient escaping and preparation in the underlying SQL query. This allows unauthenticated attackers to append malici...
CVE-2016-15040 Kento Post View Counter <= 2.8 - SQL Injection
The Kento Post View Counter plugin for WordPress is vulnerable to SQL Injection via the 'kentopvcgeo' parameter in versions up to, and including, 2.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...
WordPress Kento Post View Counter Plugin <= 2.8 is vulnerable to SQL Injection
Software Kento Post View Counter Type Plugin Vulnerable versions = 2.8 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2016-15040 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID ec30554661e3 Credits WordFence Required privilege Unauthenticate...
PT-2024-10573
Name of the Vulnerable Software and Affected Versions Kento Post View Counter plugin for WordPress versions up to, and including, 2.8 Description The issue allows unauthenticated attackers to perform SQL Injection via the kento pvc geo parameter due to insufficient escaping on the user-supplied...
WordPress plugin Kento Post View Counter SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Kento Post Vi...
CVE-2016-15040: Improper Neutralization of Special Elements used in an SQL Command
The Kento Post View Counter plugin for WordPress is vulnerable to SQL Injection via the 'kentopvcgeo' parameter in versions up to, and including, 2.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...
VulnCheck KEV: CVE-2016-15040
The Kento Post View Counter plugin for WordPress is vulnerable to SQL Injection via the 'kentopvcgeo' parameter in versions up to, and including, 2.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...
MAL-2022-4142 Malicious code in kenticodevelopmentconfiguration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36d3f0d529878ae211cea487201400019121f904c7564de5cf47ab714b38dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Wordpress Plugin Email Subscriber 跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in...
PT-2021-16076
Name of the Vulnerable Software and Affected Versions Email Subscriber WordPress plugin versions 1.1 and earlier Description The kento email subscriber ajax AJAX action does not properly sanitise, validate, and escape the submitted subscribe email and subscribe name POST parameters. These...
CVE-2016-10982
The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvcsettings CSRF...
CVE-2016-10981
The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kentopvcnumberslang, kentopvctodaytext, or kentopvctotaltext...
CVE-2016-10980
The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...
Cross site scripting
The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kentopvcnumberslang, kentopvctodaytext, or kentopvctotaltext...
Cross site scripting
The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...
Cross site request forgery (csrf)
The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvcsettings CSRF...
CVE-2016-10982
The kento-post-view-counter WordPress plugin (up to version 2.8) has a CSRF vulnerability in wp-admin/admin.php?page=kentopvc_settings. This affects the plugin’s settings page and could enable unauthorized actions when a user interacts with the UI. The provided documents do not include a patch ve...
CVE-2016-10981
CVE-2016-10981 affects the kento-post-view-counter WordPress plugin (up to version 2.8). The vulnerability is stored XSS triggered through the fields kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text. Attack context is network access with no required authentication and user in...