451 matches found
Evergreen Content Poster < 1.4.3 - Missing Authorization
Description The Evergreen Content Poster plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createnetworkpost function in versions up to, and including, 1.4.2. This makes it possible for authenticated attackers, with subscriber-level...
WordPress Evergreen Content Poster plugin <= 1.4.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by CatFather Patchstack Alliance in WordPress Plugin Evergreen Content Poster versions = 1.4.2...
CVE-2024-31345
Unrestricted Upload of File with Dangerous Type vulnerability in Sukhchain Singh Auto Poster.This issue affects Auto Poster: from n/a through 1.2...
CVE-2024-31345 WordPress Auto Poster plugin <= 1.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Sukhchain Singh Auto Poster.This issue affects Auto Poster: from n/a through 1.2...
CVE-2024-31345 WordPress Auto Poster plugin <= 1.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Sukhchain Singh Auto Poster.This issue affects Auto Poster: from n/a through 1.2...
CVE-2024-31345
CVE-2024-31345 affects the WordPress plugin Auto Poster . It is an Authenticated (Administrator+) vulnerability with Unrestricted/Arbitrary File Upload of dangerous types, according to Red Hat and Wordfence entries. The issue affects Auto Poster: from n/a through 1.2, and the vulnerability is cur...
PT-2024-23988 · Unknown · Sukhchain Singh Auto Poster
Name of the Vulnerable Software and Affected Versions: Sukhchain Singh Auto Poster versions 1.2 and earlier Description: The issue affects the Auto Poster, allowing for the unrestricted upload of files with dangerous types. Recommendations: For versions 1.2 and earlier, update to a version that...
WordPress Plugin Auto Poster 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Auto Poster plugin <= 1.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by younsoung kim, SeoHyeon Lee, MyungJu Kim, SeoHee Kang in WordPress Plugin Auto Poster versions = 1.2...
WordPress Auto Poster Plugin <= 1.2 is vulnerable to Arbitrary File Upload
Software Auto Poster Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A6: Security Misconfiguration Classification Arbitrary File Upload CVE CVE-2024-31345 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 328c54e266f4 Credits younsoung kim, SeoHyeon Lee,...
CVE-2024-29099
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1...
CVE-2024-29099
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1...
CVE-2024-29099
Evergreen Content Poster (WordPress plugin) CVE-2024-29099 is a Reflected XSS in input processed during web page generation. Affected: Evergreen Content Poster
CVE-2024-29099 WordPress Evergreen Content Poster plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1...
CVE-2024-29099 WordPress Evergreen Content Poster plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1...
PT-2024-22719 · Unknown · Evergreen Content Poster
Name of the Vulnerable Software and Affected Versions: Evergreen Content Poster versions 1.4.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers...
WordPress Plugin Evergreen Content Poster Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Evergreen Content Poster Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)
Software Evergreen Content Poster Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29099 Patch priority Medium CVSS severity Medium 7.1 Developer Evergreen Content Poster PSID acc9a1ae98cd Credits Joshua Chan...
CVE-2024-24932
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Djo VK Poster Group allows Reflected XSS.This issue affects VK Poster Group: from n/a through 2.0.3...
CVE-2024-24932
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Djo VK Poster Group allows Reflected XSS.This issue affects VK Poster Group: from n/a through 2.0.3...