PT-2024-20570 · WordPress · Owl Carousel

Name of the Vulnerable Software and Affected Versions: OWL Carousel – WordPress Owl Carousel Slider versions 1.4.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the...

OWL Carousel <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The OWL Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

WordPress OWL Carousel Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)

Software OWL Carousel Type Plugin Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24801 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 615e32c78c36 Credits resecured.io Required privilege Contributor...

CVE-2023-52151

CVE-2023-52151 affects Uncanny Automator (WordPress) up to version 5.1.0.2. The vulnerability is an information disclosure via log files (Sensitive Information Exposure via Log File) that could be accessed by an unauthorized actor. Root cause is exposure of sensitive data logged by the plugin, po...

CVE-2023-52151 WordPress Uncanny Automator Plugin <= 5.1.0.2 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Uncanny Automator, Uncanny Owl Uncanny Automator – Automate everything with the 1 no-code automation and integration plugin.This issue affects Uncanny Automator – Automate everything with the 1 no-code automation and...

WordPress Custom Post Carousels with Owl Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)

Software Custom Post Carousels with Owl Type Plugin Vulnerable versions = 1.4.6 Fixed in 1.4.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51493 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 106e9a571eef Credits Ngô Thiên An ancorn fro...

burrowingowlwine.ca Cross Site Scripting vulnerability OBB-3710761

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

owl-systems.com Cross Site Scripting vulnerability OBB-3650233

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-23829

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pierre JEHAN Owl Carousel plugin = 0.5.3 versions...

CVE-2023-23829

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pierre JEHAN Owl Carousel plugin = 0.5.3 versions...

CVE-2023-23829

CVE-2023-23829 affects the Owl Carousel WordPress plugin versions ≤ 0.5.3. It is a Stored Cross-Site Scripting (XSS) vulnerability that requires Admin+ privileges. Patch status indicates the flaw is Unpatched; the recommended remediation is to update to a version higher than 0.5.3 (if available)....

CVE-2023-23829 WordPress Owl Carousel Plugin <= 0.5.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pierre JEHAN Owl Carousel plugin = 0.5.3 versions...

PT-2023-19240 · Pierre Jehan · Owl Carousel

Name of the Vulnerable Software and Affected Versions: Pierre JEHAN Owl Carousel plugin versions = 0.5.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Pierre JEHAN Owl Carousel plugin...

WordPress plugin owl-carousel cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-23714

Cross-Site Request Forgery CSRF vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash plugin = 3.6.4.1 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash plugin = 3.6.4.1 versions...

CVE-2023-23714

CVE-2023-23714 affects the WordPress Uncanny Toolkit for LearnDash plugin versions ≤ 3.6.4.1. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be exploited without authentication; the issue is classified with low patch priority and low CVSS severity in Patchstack, but the CVE ent...

Legion Malware Upgraded to Target SSH Servers and AWS Credentials

An updated version of the commodity malware called Legion comes with expanded features to compromise SSH servers and Amazon Web Services AWS credentials associated with DynamoDB and CloudWatch. "This recent update demonstrates a widening of scope, with new capabilities such the ability to...

WordPress Owl Carousel Plugin <= 0.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Owl Carousel Type Plugin Vulnerable versions = 0.5.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23829 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d6ec028d5249 Credits István Márton Required...

WordPress Owl Carousel Plugin <= 0.5.3 is vulnerable to Broken Access Control

Software Owl Carousel Type Plugin Vulnerable versions = 0.5.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-44578 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 544a8d98b467 Credits thiennv Required privilege...