418 matches found
WordPress Perfect Portal Widgets plugin <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Perfect Portal Widgets versions = 3.0.3...
CVE-2024-37435
Cross-Site Request Forgery CSRF vulnerability in Rara Theme Perfect Portfolio allows Cross Site Request Forgery.This issue affects Perfect Portfolio: from n/a through 1.2.0...
CVE-2024-37435
Cross-Site Request Forgery CSRF vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross Site Request Forgery.This issue affects Perfect Portfolio: from n/a through = 1.2.0...
CVE-2024-56023 WordPress WP eCommerce Quickpay plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PerfectSolution WP eCommerce Quickpay wp-ecommerce-quickpay allows Reflected XSS.This issue affects WP eCommerce Quickpay: from n/a through = 1.1.0...
CVE-2024-37435 WordPress Perfect Portfolio theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross Site Request Forgery.This issue affects Perfect Portfolio: from n/a through = 1.2.0...
WordPress plugin Perfect Portfolio 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2025-2482
Name of the Vulnerable Software and Affected Versions: Rara Theme Perfect Portfolio versions 1.2.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved b...
CVE-2024-11891 Perfect Font Awesome Integration <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Perfect Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pfai' shortcode in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-11891 Perfect Font Awesome Integration <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Perfect Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pfai' shortcode in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress Perfect Portfolio theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Perfect Portfolio versions = 1.2.0...
WordPress Perfect Portfolio Theme <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Perfect Portfolio Type Theme Vulnerable versions = 1.2.0 Fixed in 1.2.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37435 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 073cf0103125 Credits Dhabaleshwar Das...
Malicious code in watch_perfect_addiction_fullmovies_online_on_streaming (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in watch-perfect-addiction-online-movie-free-at-homeanz (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in watch-perfect-addiction-fullmovies-on-line-stream-at-home-fresdgk (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3897 Malicious code in watch-perfect-addiction-fullmovies-on-line-stream-at-home-fresdgk (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in watch-perfect-addiction-at-online-full-movies-hd (npm)
--- -= Per source details. Do not edit below this line.=-...
SUSE CVE-2021-47295
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix memory leak in tcindexpartialdestroywork Syzbot reported memory leak in tcindexsetparms. The problem was in non-freed perfect hash in tcindexpartialdestroywork. In tcindexsetparms new tcindexdata is allocated and...
DEBIAN-CVE-2021-47295
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix memory leak in tcindexpartialdestroywork Syzbot reported memory leak in tcindexsetparms. The problem was in non-freed perfect hash in tcindexpartialdestroywork. In tcindexsetparms new tcindexdata is allocated and...
UBUNTU-CVE-2021-47295
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix memory leak in tcindexpartialdestroywork Syzbot reported memory leak in tcindexsetparms. The problem was in non-freed perfect hash in tcindexpartialdestroywork. In tcindexsetparms new tcindexdata is allocated and...
CVE-2024-33951
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Adam DeHaven Perfect Pullquotes allows Stored XSS.This issue affects Perfect Pullquotes: from n/a through 1.7.5...