342 matches found
CVE-2024-29818 WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...
CVE-2024-30184
Technical details about CVE-2024-30184 (Popup Builder XSS) are not provided in the Connected Documents. No product/version specifics or remediation are disclosed here. Monitor for updates from vendors and advisories.
CVE-2023-25965
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in mbbhatti Upload Resume.This issue affects Upload Resume: from n/a through 1.2.0...
CVE-2023-27459
CVE-2023-27459 describes a Deserialization of Untrusted Data vulnerability in the WordPress plugin WordPress User Registration (WPEverest/Masteriyo) for versions through 2.3.2.1. The vulnerability enables authenticated subscribers to achieve PHP Object Injection via untrusted data deserialization...
CVE-2024-24835
Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4...
CVE-2024-27970 WordPress WP SendFox plugin <= 1.3.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in BogdanFix WP SendFox.This issue affects WP SendFox: from n/a through 1.3.0...
CVE-2023-51510
Cross-Site Request Forgery CSRF vulnerability in Atlas Gondal Export Media URLs.This issue affects Export Media URLs: from n/a through 1.0...
CVE-2024-27207
CVE-2024-27207 affects Android/Google Pixel devices and is described as an elevation-of-privilege issue caused by exported broadcast receivers that can bypass broadcast protection. The Red Hat/NVD entries reiterate the export receivers vulnerability with the same description, and the Android Pixe...
CVE-2024-21749
Cross-Site Request Forgery CSRF vulnerability in Atakan Au 1 click disable all.This issue affects 1 click disable all: from n/a through 1.0.1...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...
CVE-2024-24847
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jgadbois CalculatorPro Calculators allows Reflected XSS.This issue affects CalculatorPro Calculators: from n/a through 1.1.7...
PT-2024-14471 · Unknown · Html5 Soundcloud Player With Playlist Free
Name of the Vulnerable Software and Affected Versions: HTML5 SoundCloud Player with Playlist Free versions n/a through 2.8.0 Description: The issue is related to Deserialization of Untrusted Data, which affects the HTML5 SoundCloud Player with Playlist Free software. Recommendations: For versions...
CVE-2023-52130
Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from n/a through 2.9.31...
CVE-2023-52123
Cross-Site Request Forgery CSRF vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10...
CVE-2023-52127 WordPress WPC Product Bundles for WooCommerce Plugin <= 7.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WPClever WPC Product Bundles for WooCommerce.This issue affects WPC Product Bundles for WooCommerce: from n/a through 7.3.1...
CVE-2023-51422 WordPress WebinarIgnition Plugin <= 3.05.0 is vulnerable to PHP Object Injection
Deserialization of Untrusted Data vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition.This issue affects Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings |...
CVE-2023-50837
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WebFactory Ltd Login Lockdown – Protect Login Form.This issue affects Login Lockdown – Protect Login Form: from n/a through 2.06...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms – Ultimate Form Builder – Contact forms and much more: from n/a through 8.5.5...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Clockwork Clockwork SMS Notfications.This issue affects Clockwork SMS Notfications: from n/a through 3.0.4...