739 matches found
WordPress Check
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Check...
CVE-2022-30464
ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...
WordPress Hover Effects plugin local file inclusion vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Hover Effects plugin 2.1 and earlier versions have a local file inclusion vulnerability, which stem...
WordPress PNG to JPG plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress PNG to JPG plugin 4.0 and earlier versions have a cross-site scripting vulnerability that c...
WordPress XML Sitemap Generator Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress XML Sitemap Generator version 2.0.4 has a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scriptin...
WordPress plugin Anti-Malware Security and Brute-Force Firewall跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. WordPress plugin Anti-Malware Security and Brute-Force Firewall is vulnerable to cross-site scripting. The...
WordPress AdRotate plugin cross-site scripting vulnerability (CNVD-2022-59803)
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. Cross-site scripting vulnerabilities exist in versions of WordPress AdRotate plugin prior to 5.8.23. The...
WordPress Subscribe To Comments Reloaded plugin cross-site request forgery vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Subscribe To Comments Reloaded plugin 211130 and earlier versions are vulnerable to cross-site...
The vulnerability of the zend_ts_hash_gracefuldestroy function (zend_ts_hash.c) in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.
The vulnerability of the zendtshashgracefuldestroy function zendtshash.c in the PHP programming language is related to the repeated release of memory. Exploiting this vulnerability may allow a remote attacker to cause service interruptions or potentially have other adverse effects...
The vulnerability of the crypt_des function in the FreeBSD operating system, which allows a hacker to increase their privileges
The vulnerability of the cryptdes function in the PostgreSQL database management system, the FreeBSD operating system, and the PHP programming language interpreter is related to errors in processing fully open text passwords when the password contains the character 0x80. Exploiting this...
WordPress SP Project
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress SP Project...
The vulnerability of the sessions subsystem in the PHP programming language interpreter allows attackers to intercept user sessions.
The vulnerability of the PHP interpreter’s sessions subsystem is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to intercept a user’s session...
The vulnerability of the phar_parse_tarfile function in the PHP programming language allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the PHP interpreter extension is related to errors in number processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially created tar archive...
The vulnerability of the `object_custom` function in the PHP programming language allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the objectcustom function located in ext/standard/varunserializer.c in the PHP interpreter is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of the utf8decode function in the PHP language interpreter allows attackers to execute XSS attacks.
The vulnerability of the utf8decode function in the PHP language interpreter exists due to insufficient validation of input data. Exploiting this vulnerability allows attackers to execute XSS attacks remotely...
The vulnerability of the NumberFormatter::setSymbol function in the PHP programming language allows a hacker to trigger a service failure.
The vulnerability of the NumberFormatter::setSymbol function in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the `SdnToJulian` function in the PHP programming language allows a hacker to trigger a service failure.
The vulnerability of the SdnToJulian function in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the openssl_x509_parse function in the OpenSSL library, a programming language interpreter for PHP, allows a hacker to execute arbitrary code in an MITM (Man-In-The-Middle) scenario.
The vulnerability of the opensslx509parse function in the OpenSSL library for the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in an MITM Man-In-The-Middle scenario...
The vulnerability of the CGI interpreter component for the PHP programming language allows attackers to disclose protected information, compromise data integrity, or cause service failures.
The vulnerability of the cgi component sapi/cgi/cgimain.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information, compromise data integrity, or cause service failures...
The vulnerability in the ext/mysqlnd/mysqlnd.c component of the PHP interpreter allows attackers to perform spoofing attacks.
The vulnerability of the ext/mysqlnd/mysqlnd.c component of the PHP programming language interpreter is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...