2721 matches found
CVE-2024-32147
CVE-2024-32147 affects the Form Plugin Team – GhozyLab Easy Contact Form Lite (WordPress plugin). The vulnerability is a Stored Cross‑Site Scripting (XSS) caused by improper neutralization of input during web page generation. Affected versions are from n/a up to 1.1.23. Public details in provided...
CVE-2024-31250 WordPress WP Server Health Stats plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Saumya Majumder WP Server Health Stats.This issue affects WP Server Health Stats: from n/a through 1.7.3...
CVE-2024-31263 WordPress Loan Repayment Calculator and Application Form plugin <= 2.9.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in aerin Loan Repayment Calculator and Application Form.This issue affects Loan Repayment Calculator and Application Form: from n/a through 2.9.4...
CVE-2024-31936
Cross-Site Request Forgery CSRF vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a before 1.2.6...
VulnCheck KEV: CVE-2024-28200
The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in...
CVE-2024-31234 WordPress REHub Framework plugin < 19.6.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam REHub Framework.This issue affects REHub Framework: from n/a before 19.6.2...
CVE-2024-31258
CVE-2024-31258 affects the WordPress Form to Chat App plugin. It is a stored XSS caused by improper input neutralization during page generation, affects 1.1.6 and earlier, and the Wordfence entry notes Patch Status: Patched (a fix is available). No exploitation details are provided in the connect...
n-vibe.com Cross Site Scripting vulnerability OBB-3897663
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Microsoft Windows 10 1809 Enterprise N SEoL
Microsoft Windows 10 1809 Enterprise N is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...
Microsoft Windows 10 1607 Enterprise N SEoL
Microsoft Windows 10 1607 Enterprise N is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...
Microsoft Windows 10 21H2 Enterprise N SEoL
Microsoft Windows 10 21H2 Enterprise N is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...
CVE-2024-31087
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joel Starnes pageMash Page Management allows Reflected XSS.This issue affects pageMash Page Management: from n/a through 1.3.0...
CVE-2024-30559
CVE-2024-30559 is a cross-site scripting (Stored XSS) vulnerability reported in the Spin 360 deg and 3D Model Viewer WordPress plugin. The CVE entry notes the flaw affects Spin 360 deg and 3D Model Viewer versions from an unspecified baseline up to 1.2.7. The linked Red Hat entry reiterates the i...
CVE-2024-30541
Cross-Site Request Forgery CSRF vulnerability in LWS LWS Optimize.This issue affects LWS Optimize: from n/a through 1.9.1...
CVE-2024-30535
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WhiteStudio Easy Form Builder.This issue affects Easy Form Builder: from n/a through 3.7.4...
CVE-2024-31095 WordPress Thumbs Rating plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.1.0...
CVE-2024-30462
Cross-Site Request Forgery CSRF vulnerability in realmag777 HUSKY – Products Filter for WooCommerce formerly WOOF.This issue affects HUSKY – Products Filter for WooCommerce formerly WOOF: from n/a through 1.3.5.1...
CVE-2024-30453
Server-Side Request Forgery SSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.6.5...
CVE-2024-30452
CVE-2024-30452 affects the Landing Page Builder (PluginOps) for WordPress, with a Stored XSS in input during web page generation (improper neutralization). Affected version range: from n/a through 1.5.1.7. Root cause as per description: improper neutralization of input leading to cross-site scrip...