1008 matches found
CVE-2023-32121 WordPress Zero Spam for WordPress plugin <= 5.4.4 - SQL Injection vulnerability
A vulnerability in Ben Marshall Zero Spam zero-spam.This issue affects Zero Spam: from n/a through = 5.4.4...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms fluentform allows SQL Injection.This issue affects Contact Form Plugin –...
CVE-2023-24410
CVE-2023-24410: WordPress plugin FluentForm (Contact Form Plugin – Fastest Contact Form Builder)
auroraborealis.llc Cross Site Scripting vulnerability OBB-3571882
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Joomla iProperty Real Estate 4.1.1 - Reflected XSS
Exploit Title: Joomla iProperty Real Estate 4.1.1 - Reflected XSS Exploit Author: CraCkEr Date: 29/07/2023 Vendor: The Thinkery LLC Vendor Homepage: http://thethinkery.net Software Link: https://extensions.joomla.org/extension/vertical-markets/real-estate/iproperty/ Demo:...
Joomla iProperty Real Estate 4.1.1 Cross Site Scripting
Exploit Title: Joomla iProperty Real Estate 4.1.1 - Reflected XSS Exploit Author: CraCkEr Date: 29/07/2023 Vendor: The Thinkery LLC Vendor Homepage: http://thethinkery.net Software Link: https://extensions.joomla.org/extension/vertical-markets/real-estate/iproperty/ Demo:...
Joomla iProperty Real Estate 4.1.1 - Reflected XSS Vulnerability
Exploit Title: Joomla iProperty Real Estate 4.1.1 - Reflected XSS Exploit Author: CraCkEr Vendor: The Thinkery LLC Vendor Homepage: http://thethinkery.net Software Link: https://extensions.joomla.org/extension/vertical-markets/real-estate/iproperty/ Demo: https://iproperty.thethinkery.net/ Versio...
WordPress User Menus – Nav Menu Visibility Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
Software User Menus – Nav Menu Visibility Type Plugin Vulnerable versions = 1.3.1 Fixed in 1.3.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Code Atlantic LLC PSID 1af27071833c Credits Rafie Muhamma...
Who’s Behind the DomainNetworks Snail Mail Scam?
If youve ever owned a domain name, the chances are good that at some point youve received a snail mail letter which appears to be a bill for a domain or website-related services. In reality, these misleading missives try to trick people into paying for useless services they never ordered, dont...
WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)
Software OOPSpam Anti-Spam Type Plugin Vulnerable versions = 1.1.44 Fixed in 1.1.45 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-35913 Patch priority Low CVSS severity Low 4.3 Developer OOPSpam LLC PSID 2dfc3bd6e459 Credits Skalucy Required...
Microsoft sued for alleged misuse of stolen Dark Web credentials
By Waqas Hold Security LLC, a cybersecurity company, has sued Microsoft for misusing over 360 million compromised credentials collected from the Dark Web. This is a post from HackRead.com Read the original post: Microsoft sued for alleged misuse of stolen Dark Web credentials...
CVE-2022-47136
Cross-Site Request Forgery CSRF vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin = 4.3.4 versions...
CVE-2022-47136 WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin = 4.3.4 versions...
CVE-2022-47136
CVE-2022-47136 is a Cross-Site Request Forgery (CSRF) vulnerability in Ninja Tables for WordPress (WPManageNinja Ninja Tables) affecting versions up to 4.3.4. The issue is due to CSRF, with patch available in version 4.3.5. Exploitation status is not reported in the provided documents. Remediate ...
CVE-2022-47152
Cross-Site Request Forgery CSRF vulnerability in Etison, LLC ClickFunnels plugin = 3.1.1 versions...
CVE-2022-47152
CVE-2022-47152 concerns the WordPress ClickFunnels plugin (
FusionInvoice 2023-1.0 Cross Site Scripting
Exploit Title: FusionInvoice 2023-1.0 - Stored XSS Cross-Site Scripting Date: 2023-05-24 Exploit Author: Andrea Intilangelo Vendor Homepage: https://www.squarepiginteractive.com Software Link: https://www.fusioninvoice.com/store Version: 2023-1.0 Tested on: Latest Version of Desktop Web Browsers...
FusionInvoice 2023-1.0 - Cross-Site Scripting Vulnerability
Exploit Title: FusionInvoice 2023-1.0 - Stored XSS Cross-Site Scripting Exploit Author: Andrea Intilangelo Vendor Homepage: https://www.squarepiginteractive.com Software Link: https://www.fusioninvoice.com/store Version: 2023-1.0 Tested on: Latest Version of Desktop Web Browsers ATTOW: Firefox...