5498 matches found
CVE-2017-18503
The CVE-2017-18503 entry concerns the WordPress Twitter Cards Meta plugin (pre-2.5.0). The connected sources confirm a cross-site scripting (XSS) vulnerability in versions prior to 2.5.0 caused by insufficient validation of client-side data. Impact described as enabling attacker‑controlled script...
CVE-2017-18504
The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF...
CVE-2017-18504
CVE-2017-18504 affects the WordPress Twitter Cards Meta plugin prior to version 2.5.0. The connected sources consistently state a cross-site request forgery (CSRF) vulnerability in this plugin, indicating that an attacker could exploit CSRF to perform unintended actions on behalf of an authentica...
CVE-2019-14948
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure...
Code injection
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure...
CVE-2019-14948
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure...
CVE-2017-18504: Cross-Site Request Forgery (CSRF)
The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF...
CVE-2019-14948: Improper Neutralization of Input During Web Page Generation
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure...
CVE-2017-18503: Improper Neutralization of Input During Web Page Generation
The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...
[SECURITY] Fedora 30 Update: kernel-5.2.7-200.fc30
The kernel meta package...
CVE-2019-14794
The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders...
CVE-2019-14794
The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders...
Design/Logic Flaw
The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders...
CVE-2019-14794
The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders...
CVE-2019-14794
CVE-2019-14794 affects the WordPress Meta Box plugin prior to version 4.16.2. The vulnerability arises from mishandling file uploads to custom folders, with a CVSS3 base score of 7.5 (network/vector, low access complexity, no privileges required, integrity impact HIGH). Public exploitation detail...
CVE-2019-14793
The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmbdeletefile attachmentid parameter...
CVE-2019-14793
The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmbdeletefile attachmentid parameter...
Arbitrary file deletion
The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmbdeletefile attachmentid parameter...
CVE-2019-14793
CVE-2019-14793 concerns the WordPress WordPress Meta Box plugin (pre-4.16.3). The vulnerability enables unauthenticated? (via the description it’s difficult to confirm authentication) file deletion through an AJAX action (wp-admin/admin-ajax.php?action=rwmb_delete_file) with an attachment_id para...