WordPress plugin Leyka 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Leyka versions = 3.31.6...

WordPress Leyka Plugin <=3.31.6 is vulnerable to Full Path Disclosure (FPD)

Software Leyka Type Plugin Vulnerable versions =3.31.6 Fixed in 3.31.7 OWASP Top 10 A5: Security Misconfiguration Classification Full Path Disclosure FPD CVE CVE-2024-49252 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 27d1979f75bc Credits Trương Hữu Phúc truonghuuphuc...

Leyka < 3.31.2 - Missing Authorization

Description The Leyka plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the sendCardCheck function in versions up to, and including, 3.31.1. This makes it possible for unauthenticated attackers to perform a card check...

CVE-2024-35683 WordPress Leyka plugin <= 3.31.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.1...

WordPress Leyka plugin <= 3.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Leyka versions = 3.31.1...

WordPress Leyka Plugin <= 3.31.1 is vulnerable to Broken Access Control

Software Leyka Type Plugin Vulnerable versions = 3.31.1 Fixed in 3.31.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35683 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0e07bf4fab5e Credits Mika Required privilege Unauthenticat...

CVE-2023-33327 WordPress Leyka plugin <= 3.30.2 - Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This issue affects Leyka: from n/a through 3.30.2...

CVE-2023-27442

Cross-Site Request Forgery CSRF vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27442

Cross-Site Request Forgery CSRF vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27442 WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27442

CVE-2023-27442 is a CSRF vulnerability in the Leyka WordPress plugin, affected versions

WordPress Plugin Leyka Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-21130 · WordPress · Leyka

Name of the Vulnerable Software and Affected Versions: Leyka plugin versions = 3.29.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user i...

WordPress Leyka plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-2995

The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-2995 Leyka < 3.30.4 - Admin+ Stored XSS

The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

PT-2023-22494 · WordPress · Leyka

Name of the Vulnerable Software and Affected Versions: Leyka WordPress plugin versions prior to 3.30.4 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example in multisi...

WordPress plugin Leyka 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...