531 matches found
CVE-2024-5349
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'mapstyle' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute...
CVE-2024-5349
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'mapstyle' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute...
CVE-2024-5349 LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'mapstyle' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute...
PT-2024-27587 · La Studio · La-Studio Element Kit For Elementor
Name of the Vulnerable Software and Affected Versions: LA-Studio Element Kit for Elementor versions 1.3.8.1 and earlier Description: A Local File Inclusion issue exists in the LA-Studio Element Kit for Elementor, specifically via the "LaStudioKit Progress Bar" widget in New Post. The issue is...
WordPress plugin LA-Studio Element Kit for Elementor security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress LA-Studio Element Kit for Elementor Plugin <= 1.3.8.1 is vulnerable to Local File Inclusion
Software LA-Studio Element Kit for Elementor Type Plugin Vulnerable versions = 1.3.8.1 Fixed in 1.3.9 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-37479 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID ddb890f0e5f3 Credits João Pedro S Alcânta...
WordPress plugin LA-Studio Element Kit for Elementor security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
radelier-de-la-loue.asso-web.com Cross Site Scripting vulnerability OBB-3938608
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in repelis-pelisplus-ver-la-ballena-2022-pelicula-completa-en-espanol (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2958 Malicious code in repelis-pelisplus-ver-la-ballena-2022-pelicula-completa-en-espanol (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2192 Malicious code in down_load_ebook_la_scienza_dei_capelli_by_elena_accorsi_buttini_l2q0j (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2154 Malicious code in down_load_ebook_causa_de_la_muerte_by_richard_shepherd_2a7ov (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2127 Malicious code in down_load_ebook_al_suelo_enredos_con_la_ley_4_by_ruth_m_lerga_smplq (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in cuevana-3-ver-john-wick-4-2023-descargar-la-pelicula (npm)
--- -= Per source details. Do not edit below this line.=-...
Ransomware Attacks Are Getting Worse
Plus: US lawmakers have nothing to say about an Israeli influence campaign aimed at US voters, a former LA Dodgers owner wants to fix the internet, and more...
CVE-2024-35725
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6...
CVE-2024-35725
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6...
CVE-2024-35725
CVE-2024-35725: Missing Authorization vulnerability in LA-Studio Element Kit for Elementor affecting LA-Studio Element Kit for Elementor versions up to 1.3.6. Connected sources confirm a broken access control issue with high impact (per NVD CVSS: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The document...
CVE-2024-35725 WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6...
WordPress plugin LA-Studio Element Kit for Elementor security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...