CVE-2024-49661

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lew Ayotte leenk.me leenkme allows Reflected XSS.This issue affects leenk.me: from n/a through = 2.16.0...

CVE-2024-49661

CVE-2024-49661 is a Reflected XSS vulnerability in the WordPress plugin leenk.me (versions n/a–2.16.0). The issue is due to improper input handling during web page generation and affects leenk.me up to 2.16.0. It was documented with explicit details by Patchstack noting the vulnerable plugin and ...

CVE-2024-49661 WordPress leenk.me plugin <= 2.16.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lew Ayotte leenk.me leenkme allows Reflected XSS.This issue affects leenk.me: from n/a through = 2.16.0...

WordPress Backup Buddy plugin 8.5.8.0 - 8.7.4.1 - Unauthenticated Path Traversal / Arbitrary File Download vulnerability

Unauthenticated Path Traversal / Arbitrary File Download vulnerability discovered by Lew Ayotte & Timothy Jacobs in WordPress Backup Buddy plugin versions 8.5.8.0 - 8.7.4.1. Solution Update the WordPress BackupBuddy plugin to the latest available version at least 8.7.5.0...