CVE-2022-4501

The CVE-2022-4501 entry concerns the Mega Addons plugin for WordPress, where an authorization bypass exists due to a missing capability check in the vc_saving_data function up to version 4.2.7. This allows authenticated users with subscriber-level permissions and above to update plugin settings. ...

CVE-2022-4501 Mega Addons For WPBakery Page Builder <= 4.3.0 - Authenticated (Subscriber+) Settings Update

The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vcsavingdata function in versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin'...

PT-2022-27365 · WordPress · Mega Addons

Name of the Vulnerable Software and Affected Versions: Mega Addons plugin for WordPress versions up to, and including, 4.2.7 Description: The issue is related to authorization bypass due to a missing capability check on the vc saving data function. This allows authenticated attackers with...

WordPress plugin Mega Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2022-4501: Missing Authorization

The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vcsavingdata function in versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin'...

CVE-2022-2827

AMI MegaRAC User Enumeration Vulnerability...

Here’s How Bad a Twitter Mega-Breach Would Be

Elon Musk laid off half the staff, and mass resignations seem likely. If nobody’s there to protect the fort, what’s the worst that could happen?...

CVE-2022-36798

Cross-Site Request Forgery CSRF vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin = 4.2.7 at WordPress...

CVE-2022-36798

Cross-Site Request Forgery CSRF vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin = 4.2.7 at WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin = 4.2.7 at WordPress...

CVE-2022-36798 WordPress Mega Addons For WPBakery Page Builder plugin <= 4.2.7 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin = 4.2.7 at WordPress...

CVE-2022-36798

CVE-2022-36798 is a CSRF vulnerability affecting the WordPress plugin Mega Addons For WPBakery Page Builder

WordPress plugin Topdigitaltrends Mega Addons For WPBakery Page Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2022-36798: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin = 4.2.7 at WordPress...

CVE-2022-40191

Authenticated subscriber+ Stored Cross-Site Scripting XSS vulnerability in Ali Khallad's Contact Form By Mega Forms plugin = 1.2.4 at WordPress...

CVE-2022-40191 WordPress Contact Form By Mega Forms plugin <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated subscriber+ Stored Cross-Site Scripting XSS vulnerability in Ali Khallad's Contact Form By Mega Forms plugin = 1.2.4 at WordPress...

CVE-2022-40191

Summary: CVE-2022-40191 affects the WordPress plugin “Ali Khallad’s Contact Form By Mega Forms” up to version 1.2.4. The issue is an authenticated (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability stemming from inadequate sanitization/escaping of input, enabling script injection by us...

CVE-2022-40191: Improper Neutralization of Input During Web Page Generation

Authenticated subscriber+ Stored Cross-Site Scripting XSS vulnerability in Ali Khallad's Contact Form By Mega Forms plugin = 1.2.4 at WordPress...

WordPress plugin Contact Form By Mega Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

PT-2022-25272 · WordPress · Ali Khallad'S Contact Form By Mega Forms

Name of the Vulnerable Software and Affected Versions: Ali Khallad's Contact Form By Mega Forms plugin versions = 1.2.4 Description: The issue is an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with subscriber or higher privileges can inject malicious...