5541 matches found
CVE-2021-4351: Missing Authorization
The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Post Meta Change in versions up to, and including, 18.2. This is due to lacking authentication protections, capability checks, and sanitization, all on the wpfmfilemetaupdate AJAX action. This makes it possible for...
CVE-2023-1661
The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post metadata in versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2023-1661
The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post metadata in versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
PT-2023-17152 · WordPress · Display Post Meta
Name of the Vulnerable Software and Affected Versions: Display post meta, term meta, comment meta, and user meta plugin for WordPress versions up to, and including, 0.4.1 Description: The issue arises from insufficient input sanitization and output escaping, allowing authenticated attackers with...
CVE-2023-1661: Improper Neutralization of Input During Web Page Generation
The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post metadata in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
Wordpress plugin User Meta – User Profile Builder and User management 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
Phishing Domains Tanked After Meta Sued Freenom
The number of phishing websites tied to domain name registrar Freenom dropped precipitously in the months surrounding a recent lawsuit from social networking giant Meta, which alleged the free domain name provider has a long history of ignoring abuse complaints about phishing websites while...
Google Map Shortcode <= 3.1.2 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin PoC Note: The...
Meta’s $1.3 Billion Fine Is a Strike Against Surveillance Capitalism
The record-breaking GDPR penalty for data transfers to the US could upend Meta's business and spur regulators to finalize a new data-sharing agreement...
CVE-2023-23712
Cross-Site Request Forgery CSRF vulnerability in User Meta Manager plugin = 3.4.9 versions...
CVE-2023-23712
Cross-Site Request Forgery CSRF vulnerability in User Meta Manager plugin = 3.4.9 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in User Meta Manager plugin = 3.4.9 versions...
CVE-2023-23712 WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in User Meta Manager plugin = 3.4.9 versions...
CVE-2023-23712 WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in User Meta Manager plugin = 3.4.9 versions...
CVE-2023-23712
CVE-2023-23712 affects the WordPress plugin User Meta Manager, with versions
CVE-2023-23712: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in User Meta Manager plugin = 3.4.9 versions...
PT-2023-19152 · WordPress · User Meta Manager
Name of the Vulnerable Software and Affected Versions: User Meta Manager plugin versions = 3.4.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
WordPress plugin User Meta Manager 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...