CVE-2024-12239

CVE-2024-12239 (PowerPack Lite for Beaver Builder, WordPress) is a Reflected Cross-Site Scripting flaw in the navigate parameter, affecting all versions up to 1.3.0.5. It allows unauthenticated attackers to inject scripts that run when an admin user interacts with a crafted link. The Red Hat entr...

PT-2024-17505 · WordPress · Powerpack Lite For Beaver Builder

Name of the Vulnerable Software and Affected Versions: PowerPack Lite for Beaver Builder plugin for WordPress versions up to, and including, 1.3.0.5 Description: The issue is a Reflected Cross-Site Scripting vulnerability due to insufficient input sanitization and output escaping. This allows...

WordPress plugin PowerPack Lite for Beaver Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2024-55989

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kyle M Brown WP Simple Pay Lite Manager stripe-manager allows SQL Injection.This issue affects WP Simple Pay Lite Manager: from n/a through = 1.4...

CVE-2024-55989

CVE-2024-55989 is a SQL injection vulnerability in the WordPress plugin WP Simple Pay Lite Manager . The issue affects the plugin versions listed as vulnerable (from n/a up to 1.4) and is exploitable via improper neutralization of inputs in SQL commands, enabling an attacker with authenticated (A...

CVE-2024-55989 WordPress WP Simple Pay Lite Manager Plugin <= 1.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kyle M Brown WP Simple Pay Lite Manager stripe-manager allows SQL Injection.This issue affects WP Simple Pay Lite Manager: from n/a through = 1.4...

CVE-2024-55989 WordPress WP Simple Pay Lite Manager Plugin <= 1.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kyle M. Brown WP Simple Pay Lite Manager allows SQL Injection.This issue affects WP Simple Pay Lite Manager: from n/a through 1.4...

WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameter vulnerability

Reflected Cross-Site Scripting via Navigate Parameter vulnerability discovered by Le Ngoc Anh in WordPress Plugin PowerPack Lite for Beaver Builder versions = 1.3.0.5...

WordPress Zerif Lite Theme <= 1.8.5.49 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by ? in WordPress Theme Zerif Lite versions = 1.8.5.49...

WordPress plugin WP Simple Pay Lite Manager SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress WP Simple Pay Lite Manager Plugin <= 1.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin WP Simple Pay Lite Manager versions = 1.4...

CVE-2024-54297

Authentication Bypass Using an Alternate Path or Channel vulnerability in extremeidea vBSSO-lite vbsso-lite allows Authentication Bypass.This issue affects vBSSO-lite: from n/a through = 1.4.3...

CVE-2024-54288

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LDD Web Design LDD Directory Lite ldd-directory-lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through = 3.3...

CVE-2023-41671

Missing Authorization vulnerability in tychesoftwares Abandoned Cart Lite for WooCommerce woocommerce-abandoned-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Abandoned Cart Lite for WooCommerce: from n/a through = 5.16.1...

CVE-2024-54297 WordPress vBSSO-lite plugin <= 1.4.3 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in extremeidea vBSSO-lite vbsso-lite allows Authentication Bypass.This issue affects vBSSO-lite: from n/a through = 1.4.3...

CVE-2024-54297 WordPress vBSSO-lite plugin <= 1.4.3 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in extremeidea vBSSO-lite vbsso-lite allows Authentication Bypass.This issue affects vBSSO-lite: from n/a through = 1.4.3...

CVE-2024-54297

CVE-2024-54297 affects vBSSO-lite (WordPress plugin) with an Authentication Bypass via an Alternate Path or Channel. The entry covers vBSSO-lite versions from n/a up to 1.4.3, and the Red Hat advisory reiterates the same vulnerability description. Root cause: Missing authorization to privilege es...

CVE-2024-54288 WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LDD Web Design LDD Directory Lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through 3.3...

CVE-2024-54288

CVE-2024-54288 affects the WordPress plugin “LDD Directory Lite” up to version 3.3 (names/versions vary in sources). The issue is an Improper Neutralization of Input During Web Page Generation (XSS) leading to a reflected XSS vulnerability. The root cause is insufficient input handling in web pag...

CVE-2024-54288 WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LDD Web Design LDD Directory Lite ldd-directory-lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through = 3.3...