WordPress Leyka plugin <= 3.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Leyka versions = 3.31.1...

WordPress Leyka Plugin <= 3.31.1 is vulnerable to Broken Access Control

Software Leyka Type Plugin Vulnerable versions = 3.31.1 Fixed in 3.31.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35683 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0e07bf4fab5e Credits Mika Required privilege Unauthenticat...

CVE-2023-33327

Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This issue affects Leyka: from n/a through 3.30.2...

CVE-2023-33327 WordPress Leyka plugin <= 3.30.2 - Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This issue affects Leyka: from n/a through 3.30.2...

CVE-2023-33327 WordPress Leyka plugin <= 3.30.2 - Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This issue affects Leyka: from n/a through 3.30.2...

WordPress plugin Leyka 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-12429 · Leyka · Leyka

Name of the Vulnerable Software and Affected Versions: Leyka versions 3.30.2 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in Leyka. Recommendations: For Leyka versions 3.30.2 and earlier, at the moment, there is no information...

CVE-2023-27442

Cross-Site Request Forgery CSRF vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27442

Cross-Site Request Forgery CSRF vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27442 WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27442

CVE-2023-27442 is a CSRF vulnerability in the Leyka WordPress plugin, affected versions

WordPress Plugin Leyka Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-21130 · WordPress · Leyka

Name of the Vulnerable Software and Affected Versions: Leyka plugin versions = 3.29.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user i...

WordPress Leyka plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-2995

The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-2995

The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Cross site scripting

The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-2995 Leyka < 3.30.4 - Admin+ Stored XSS

The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-2995 Leyka < 3.30.4 - Admin+ Stored XSS

The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...