The vulnerability of the Flat PM Plugin plugin in the WordPress content management system, which exists due to the lack of measures taken to protect the website’s structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Flat PM Plugin in the WordPress content management system exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks remotely...

CVE-2022-3934 Flat PM < 3.0.13 - Reflected Cross-Site Scripting

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Flat PM < 3.0.13 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC v 3.0.13 the blockid needs to start with an existing block ID...

WordPress Front End PM plugin < 11.3.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Front End PM plugin versions 11.3.4. Solution Update the WordPress Front End PM plugin to the latest available version at least 11.3.4...

e107 'e107_plugins/pm/pm.php' SQL Injection Vulnerability

e107 is an open source, free and PHP and MySQL based content management system CMS from e107 Inc. in the United States. The system supports a variety of plug-in programs and appearance of the theme , can be used as a personal blog , discussion community , archive repository and so on. A SQL...