92 matches found
WordPress Plugin Pets 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...
PT-2025-43233
Name of the Vulnerable Software and Affected Versions Igor Benic Pets versions through 1.4.1 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting issue. This allows for the execution of malicious...
CVE-2025-52742: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Igor Benic Pets pets allows Reflected XSS.This issue affects Pets: from n/a through = 1.4.1...
EUVD-2014-6653
Malware in sbrugna...
EUVD-2014-5677
Malware in sbrugna...
Malicious code in guess-pets (npm)
The package guess-pets was found to contain malicious code...
Malicious code in @leaffm/leaf-connect-bunty-pets (npm)
The package @leaffm/leaf-connect-bunty-pets was found to contain malicious code...
MAL-2025-22033 Malicious code in guess-pets (npm)
The package guess-pets was found to contain malicious code...
MAL-2025-8381 Malicious code in @leaffm/leaf-connect-bunty-pets (npm)
The package @leaffm/leaf-connect-bunty-pets was found to contain malicious code...
WordPress Pets Plugin <= 1.4.1 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Pets versions = 1.4.1...
Mars: Upload profile photo and Pets addition - IDOR
The Insecure Direct Object Reference IDOR vulnerability was discovered on the website ██████████. The vulnerability allowed for the manipulation of user accounts by unauthorized users through the profile photo upload feature and the pet addition system. Specific parameters in the requests could b...
Mars: CSRF to delete a pet on ██████
The /pets/delete endpoint on ████ was susceptible to Cross-Site Request Forgery CSRF attacks. This vulnerability enabled the deletion of a pet from the targeted user's account without authorization...
WordPress Pets Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)
Software Pets Type Plugin Vulnerable versions = 1.4.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID de9a99f2fff5 Credits Rafie Muhammad Patchstack Required privilege...
pets-n-friends.com Cross Site Scripting vulnerability OBB-3133746
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pets-jp.net Cross Site Scripting vulnerability OBB-2822744
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pets-jp.net Cross Site Scripting vulnerability OBB-2819787
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Pets plugin <= 1.4.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Pets plugin versions = 1.4.0. Solution Update the WordPress Pets plugin to the latest available version at least 1.4.1...
WordPress Pets plugin <= 1.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pets plugin versions = 1.4.0. Solution Update the WordPress Pets plugin to the latest available version at least 1.4.1...
pets-classifieds.com Cross Site Scripting vulnerability OBB-2371221
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
compassionfirstpets.com Cross Site Scripting vulnerability OBB-1386743
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...