PT-2024-39965 · WordPress · Wp Show More

Name of the Vulnerable Software and Affected Versions: WP show more plugin for WordPress versions up to, and including, 1.0.7 Description: The issue is related to Stored Cross-Site Scripting via the plugin's show more shortcode due to insufficient input sanitization and output escaping on...

WordPress WP show more plugin <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin WP show more versions = 1.0.7...

WordPress WP show more Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software WP show more Type Plugin Vulnerable versions = 1.0.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9967 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 29adade124a3 Credits Peter Thaleikis Required...

WordPress Simple Load More plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Simple Load More versions = 1.0...

WordPress Simple Load More Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Load More Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49662 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cc90907a6e66 Credits Mika Required privilege...

WordPress Read more By Adam plugin <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Read More Button Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Read More Button Deletion vulnerability discovered by Francesco Carlucci in WordPress Plugin Read more By Adam versions = 1.1.8...

WordPress Read more By Adam Plugin <= 1.1.8 is vulnerable to Broken Access Control

Software Read more By Adam Type Plugin Vulnerable versions = 1.1.8 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9187 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bad5d062abf4 Credits Francesco Carlucci Required...

CVE-2024-9187

The Read more By Adam plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deleteRm function in all versions up to, and including, 1.1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete read...

CVE-2024-9187

CVE-2024-9187 – WordPress Read more By Adam plugin : The Read more By Adam plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the deleteRm() function in all versions up to and including 1.1.8. This allows authenticated attackers with Subscriber-le...

CVE-2024-9187: Missing Authorization

The Read more By Adam plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deleteRm function in all versions up to, and including, 1.1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete read...

PT-2024-39477 · WordPress · Read More By Adam

Name of the Vulnerable Software and Affected Versions: Read more By Adam plugin for WordPress versions up to, and including, 1.1.8 Description: The issue is related to a missing capability check on the deleteRm function, allowing authenticated attackers with Subscriber-level access and above to...

Malware in new-script-clipox-gt-a-v-h-a-c-k-mon-ey-tp-guns-esp-vehicles-more-1-52-undetected-2023-6yc1p7

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

The vulnerability of the WordPress Infinite Scroll plugin – the Ajax Load More feature of the WordPress content management system – relates to the lack of security measures for website structures. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the WordPress Infinite Scroll plugin – the Ajax Load More feature of the WordPress content management system – is related to the lack of protective measures for the website’s structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...

Debian: Security Advisory (DSA-5782-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-8505

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘buttonlabel’ parameter in all versions up to, and including, 7.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-8505

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘buttonlabel’ parameter in all versions up to, and including, 7.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-8505 WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘buttonlabel’ parameter in all versions up to, and including, 7.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

WordPress Ajax Load More plugin <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via buttonlabel Parameter vulnerability discovered by Robert DeVore in WordPress Plugin Ajax Load More versions = 7.1.2...

WordPress Ajax Load More Plugin <= 7.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Ajax Load More Type Plugin Vulnerable versions = 7.1.2 Fixed in 7.1.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8505 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 333f5ab48634 Credits Robert DeVore Required...

CVE-2024-8505: Improper Neutralization of Alternate XSS Syntax

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘buttonlabel’ parameter in all versions up to, and including, 7.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...