WordPress Alert Me! Plugin <= 0.4.0 is vulnerable to Cross Site Scripting (XSS)

Software Alert Me! Type Plugin Vulnerable versions = 0.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51825 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 098c1e3ec668 Credits SOPROBRO Required privilege Contributor...

PT-2024-8444 · Symphony +4 · Symphony +4

Name of the Vulnerable Software and Affected Versions: Symphony versions prior to 5.4.47 Symphony versions prior to 6.4.15 Symphony versions prior to 7.1.8 Description: The vulnerability is related to the authentication process in the Symphony PHP framework. When consuming a persisted remember-me...

WordPress RSVP ME Plugin <= 1.9.9 is vulnerable to SQL Injection

Software RSVP ME Type Plugin Vulnerable versions = 1.9.9 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50544 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 1e22cf9c262a Credits LVT-tholv2k Required privilege Contributor Published 31...

CVE-2024-49661

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Lew Ayotte leenk.Me allows Reflected XSS.This issue affects leenk.Me: from n/a through 2.16.0...

WordPress plugin leenk.Me 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-50491

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Micah Blu RSVP ME allows SQL Injection.This issue affects RSVP ME: from n/a through 1.9.9...

CVE-2024-50491

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...

CVE-2024-50491 WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...

CVE-2024-50491 WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...

CVE-2024-50491

CVE-2024-50491 concerns the RSVP ME WordPress plugin (versions

WordPress plugin RSVP ME SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin RSVP ME versions = 1.9.9...

WordPress RSVP ME Plugin <= 1.9.9 is vulnerable to SQL Injection

Software RSVP ME Type Plugin Vulnerable versions = 1.9.9 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50491 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID c4aa990dd57c Credits LVT-tholv2k Required privilege Unauthenticated Published ...

CVE-2024-8741 Beam me up Scotty – Back to Top Button <= 1.0.21 - Reflected Cross-Site Scripting

The Beam me up Scotty – Back to Top Button plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.21. This makes it possible for unauthenticated attackers to inject...

WordPress plugin Beam me up Scotty 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress Beam me up Scotty – Back to Top Button Plugin <= 1.0.21 is vulnerable to Cross Site Scripting (XSS)

Software Beam me up Scotty – Back to Top Button Type Plugin Vulnerable versions = 1.0.21 Fixed in 1.0.22 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8741 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b85fc952fded...

CVE-2024-7415 Remember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure

The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin allowing direct access to the bootstrap.php file which has displayerrors on. This makes it possible for unauthenticated attackers to retrieve...

WordPress Remember Me Controls plugin <= 2.0.1 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Remember Me Controls versions = 2.0.1...

WordPress Remember Me Controls Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure

Software Remember Me Controls Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-7415 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID aaea3456c788 Credits stealthcopter Required...

WordPress plugin Remember Me Controls 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...