273 matches found
CVE-2024-0667
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.15.21. This is due to missing or incorrect nonce validation on the 'execute' function. This makes it possible for...
CVE-2024-0667 Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.15.21. This is due to missing or incorrect nonce validation on the 'execute' function. This makes it possible for...
Input validation
Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service DoS attack against external services...
CVE-2024-22027
Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service DoS attack against external services...
CVE-2024-22027
CVE-2024-22027 affects the WordPress Quiz Maker Plugin predating version 6.5.0.6. The issue is an improper input validation (CWE-20) that enables a remote authenticated attacker to trigger a Denial of Service against external services. Affected software: WordPress Quiz Maker Plugin, prior to 6.5....
Improper input validation vulnerability in WordPress Plugin "WordPress Quiz Maker Plugin"
Overview WordPress Plugin "WordPress Quiz Maker Plugin" provided by AYS Pro Plugins contains an improper input validation vulnerability CWE-20. Shogo Kumamaru of LAC CyberLink Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...
PT-2024-19161 · WordPress · Wordpress Quiz Maker Plugin
Name of the Vulnerable Software and Affected Versions: WordPress Quiz Maker Plugin versions prior to 6.5.0.6 Description: The issue is related to improper input validation, allowing a remote authenticated attacker to perform a Denial of Service DoS attack against external services. Recommendation...
CVE-2023-52180
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0...
CVE-2023-6155
The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately authorize the aysquizauthorusersearch AJAX action, allowing an unauthenticated attacker to perform a search for users of the system, ultimately leaking user email addresses...
WordPress Poll Maker Plugin <= 4.8.0 is vulnerable to Broken Access Control
Software Poll Maker Type Plugin Vulnerable versions = 4.8.0 Fixed in 4.8.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-50904 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID acddbd8f12ba Credits Abdi Pranata Required...
PT-2023-32552 · WordPress · Quiz Maker
Name of the Vulnerable Software and Affected Versions: The Quiz Maker WordPress plugin versions prior to 6.4.9.5 Description: The issue is related to Reflected Cross-Site Scripting, where generated URLs are not properly escaped before being outputted in attributes. This can lead to malicious...
WordPress plugin Quiz Maker security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
VulnCheck KEV: CVE-2022-0747
The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the postid parameter before using it in a SQL statement via the qcldupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...
CVE-2023-34013
Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...
PT-2023-24632 · WordPress · The Poll Maker – Best Wordpress Poll Plugin
Name of the Vulnerable Software and Affected Versions: Poll Maker – Best WordPress Poll Plugin versions 4.6.2 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means an attacker can potentially force the server to make unintended requests, leading to...
WordPress Plugin Form Maker by 10Web - Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Form Maker by 10Web -...
CVE-2023-4666 Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE...
EUVD-2023-54518
The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE...