25 matches found
CVE-2019-17230
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
PT-2024-37846 · WordPress · Social Auto Poster
Name of the Vulnerable Software and Affected Versions: Social Auto Poster plugin for WordPress versions up to, and including, 5.3.14 Description: The issue allows unauthorized access, modification, and loss of data due to a missing capability check on multiple functions. This enables...
VulnCheck KEV: CVE-2019-17230
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
CVE-2019-17230
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
CVE-2019-17230
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
CVE-2019-17230
The OneTone theme for WordPress (versions 3.0.6 and earlier ) contains a security vulnerability in the includes/theme-functions.php file. This flaw allows unauthenticated attackers to perform unauthorized options changes , which can be used to modify site content such as 404 page messages to inje...
CVE-2019-17230: Undefined Security Weakness
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...
PT-2020-9884
Name of the Vulnerable Software and Affected Versions OneTone theme versions 3.0.6 and earlier for WordPress Description The issue allows unauthenticated options changes due to a problem in the includes/theme-functions.php file. Recommendations For OneTone theme versions 3.0.6 and earlier, update...
CVE-2019-17228
The motors-car-dealership-classified-listings (also known as Motors - Car Dealer & Classified Ads ) plugin for WordPress is vulnerable in versions through 1.4.0 . A design/logic flaw in the includes/options.php file allows unauthenticated attackers to modify plugin settings via the import/export ...
CVE-2019-17228: Insufficient Verification of Data Authenticity
includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes...
CVE-2019-16251
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...
Design/Logic Flaw
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...
CVE-2019-16251
CVE-2019-16251 affects the YIT Plugin Framework (plugin-fw/lib/yit-plugin-panel-wc.php) up to version 3.3.8 used by WordPress plugins, allowing authenticated users to change plugin options. Connected sources confirm this affects multiple YITH plugins (Order Tracking, Custom Thank You Page for Woo...
CVE-2019-16251
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...
CVE-2019-16251: Undefined Security Weakness
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...
PT-2019-14601
Name of the Vulnerable Software and Affected Versions YIT Plugin Framework versions prior to 3.3.9 Description The issue allows authenticated options changes, potentially leading to unauthorized modifications. Recommendations For versions prior to 3.3.9, update to version 3.3.9 or later to resolv...
CVE-2019-16250
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...
Design/Logic Flaw
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...