CVE-2024-53821 WordPress Pie Register Premium plugin < 3.8.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Genetech Pie Register Premium allows Reflected XSS.This issue affects Pie Register Premium: from n/a before 3.8.3.3...

CVE-2024-53821

CVE-2024-53821 : Reflected Cross-Site Scripting in the WordPress plugin Pie Register Premium (vulnerable:

PT-2024-35937 · Unknown · Pie Register Premium

Name of the Vulnerable Software and Affected Versions: Pie Register Premium versions prior to 3.8.3.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can inject...

WordPress plugin Pie Register Premium 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Pie Register (Add on) - Social Sites Login plugin <= 1.7.9 - Authentication Bypass vulnerability

WordPress Pie Register Add on - Social Sites Login plugin = 1.7.9 - Authentication Bypass vulnerability discovered by wesley wcraft in WordPress Plugin Pie Register Add on - Social Sites Login versions = 1.7.9...

WordPress Pie Register Premium plugin < 3.8.3.3 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pie Register Premium versions 3.8.3.3...

WordPress Pie Register Premium plugin < 3.8.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pie Register Premium versions 3.8.3.3...

WordPress Pie Register Premium plugin < 3.8.3.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pie Register Premium versions 3.8.3.3...

WordPress Pie Register Premium Plugin < 3.8.3.3 is vulnerable to Broken Access Control

Software Pie Register Premium Type Plugin Vulnerable versions 3.8.3.3 Fixed in 3.8.3.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-52391 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4396b4ed7d8a Credits Ananda Dhakal Patchsta...

Linux Kernel PIE Stack Buffer Corruption Vulnerability

Linux kernel contains a position-independent executable PIE stack buffer corruption vulnerability in loadelf binary that allows a local attacker to escalate privileges...

CVE-2024-6069 Pie Register - Basic <= 3.8.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pieregisterinstalladdon function in...

WordPress Pie Register plugin <= 3.8.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary plugin Installation and Activation/Deactivation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary plugin Installation and Activation/Deactivation vulnerability discovered by Lucio Sá in WordPress Plugin Pie Register versions = 3.8.3.4...

WordPress Pie Register Plugin <= 3.8.3.4 is vulnerable to Broken Access Control

Software Pie Register Type Plugin Vulnerable versions = 3.8.3.4 Fixed in 3.8.3.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-6069 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 62f61e484b06 Credits Lucio Sá Required privilege...

WordPress Pie Register - Social Sites Login (Add on) plugin <= 1.7.7 - Authentication Bypass vulnerability

WordPress Pie Register - Social Sites Login Add on plugin = 1.7.7 - Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Pie Register Add on - Social Sites Login versions = 1.7.7...

CVE-2024-4544 Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass

The Pie Register - Social Sites Login Add on plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.7. This is due to insufficient verification on the user being supplied during a social login through the plugin. This makes it possible for unauthenticate...

CVE-2024-4544

CVE-2024-4544 affects Pie Register - Social Sites Login (Add on) for WordPress. Versions up to 1.7.7 are vulnerable to authentication bypass due to insufficient verification during social login, enabling unauthenticated users to log in as an existing user (e.g., admin) if they have the user’s ema...

CVE-2024-4544 Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass

The Pie Register - Social Sites Login Add on plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.7. This is due to insufficient verification on the user being supplied during a social login through the plugin. This makes it possible for unauthenticate...

WordPress Pie Register (Add on) - Social Sites Login Plugin <= 1.7.7 is vulnerable to Broken Authentication

Software Pie Register Add on - Social Sites Login Type Plugin Vulnerable versions = 1.7.7 Fixed in 1.7.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-4544 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID...

WordPress plugin Pie Register 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2020-8006

The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging station do not use a number of common exploitation mitigations. In...