CVE-2024-11462

The Filestack Official plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fstab' and 'filestackoptions' parameters in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

CVE-2024-11462

CVE-2024-11462 affects the Filestack WP Upload (Filestack Official) WordPress plugin. It enables Reflected XSS via the fstab and filestack_options parameters in all versions up to 2.0.0, exploitable by unauthenticated attackers who lure a user into executing an action. Connected Red Hat entry rep...

WordPress plugin Platform.Ly Official 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

WordPress MailerLite – Signup forms (official) plugin <= 1.7.6 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Krzysztof Zając in WordPress Plugin MailerLite versions = 1.7.6...

WordPress Freshdesk (official) plugin <= 2.3.6 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Freshdesk official versions = 2.3.6...

CVE-2023-34176

CVE-2023-34176 affects the Chilexpress Woo Oficial WordPress plugin (

Uptime Kuma 路径遍历漏洞

Uptime Kuma is an easy-to-use, self-hosted monitoring tool from Louis Lam Personal Developer. A path traversal vulnerability exists in Uptime Kuma versions prior to 1.22.1, which stems from allowing authenticated users to install plugins from the official plugin list, which is susceptible to path...

SEUR Oficial < 1.7.2 - Admin+ Arbitrary File Download

The plugin creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction after knowing the URL and a password than an administrator can see in the plugin settings page. PoC Navigate to...

Wordpress skysa-official plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress skysa-official plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Islamic Republic Of Iran Security Team http://irist.ir/forum/ Wordpress skysa-official plugin Cross-Site Scripting Vulnerabilities Download......:...