1172 matches found
CVE-2022-1904 Easy Pricing Tables < 3.2.1 - Reflected Cross-Site-Scripting
The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled, leading to a Reflected Cross-Site Scripting...
WordPress plugin Pricing Tables 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is an application plugin. cross-site scripting vulnerability...
MAL-2022-1171 Malicious code in audit-pricing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63494ded7d57fd765870370ad094bbbf96de1b2ea04e60358ef700792419245a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in audit-pricing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63494ded7d57fd765870370ad094bbbf96de1b2ea04e60358ef700792419245a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Pricing Deals for WooCommerce < 2.0.3 - Unauthenticated SQLi
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...
WordPress Fatcat Apps Easy Pricing Tables plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Fatcat Apps Easy Pricing Tables plugin 3.1.2 and earlier versions contain a cross-site...
CVE-2021-36866
Authenticated author or higher role Stored Cross-Site Scripting XSS vulnerability in Fatcat Apps Easy Pricing Tables plugin = 3.1.2 at WordPress...
Cross site scripting
Authenticated author or higher role Stored Cross-Site Scripting XSS vulnerability in Fatcat Apps Easy Pricing Tables plugin = 3.1.2 at WordPress...
WordPress plugin Fatcat Apps Easy Pricing Tables 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Fatcat Apps Easy Pricing Tables plugin 3.1.2 and earlier versions contain a cross-site...
CVE-2021-36866 WordPress Easy Pricing Tables plugin <= 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated author or higher role Stored Cross-Site Scripting XSS vulnerability in Fatcat Apps Easy Pricing Tables plugin = 3.1.2 at WordPress...
CVE-2021-36866 WordPress Easy Pricing Tables plugin <= 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated author or higher role Stored Cross-Site Scripting XSS vulnerability in Fatcat Apps Easy Pricing Tables plugin = 3.1.2 at WordPress...
CVE-2021-36866
Summary: CVE-2021-36866 affects the Fatcat Apps Easy Pricing Tables WordPress plugin up to version 3.1.2. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) flaw caused by insufficient sanitization/escaping of inputs in the plugin, enabling an authenticated user (author or hi...
Easy Pricing Tables < 3.2.1 - Reflected Cross-Site-Scripting
The plugin does not sanitise and escape parameter before outputting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled, leading to a Reflected Cross-Site Scripting PoC With the "Compatibility Mode"...
Easy Pricing Tables < 3.1.3 - Author+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some parameters, which could allow users with a role as low as author to perform Stored Cross-Site Scripting attacks...
WordPress Easy Pricing Tables plugin <= 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Easy Pricing Tables plugin versions = 3.1.2. Solution Update the WordPress Easy Pricing Tables plugin to the latest available version at least 3.1.3...
DFIR Without Limits: Moving Beyond the “Sucker's Choice” of Today’s Breach Response Services
Three-quarters of CEOs and their boards believe a major breach is “inevitable.” And those closest to the action? Like CISOs? They’re nearly unanimous. Gartner is right there, too. Their 2021 Market Guide for Digital Forensics and Incident Response DFIR Services recommends you “operate under the...
WordPress Pricing Table plugin SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A SQL injection vulnerability exists in versions prior to WordPress Pricing Table s plugin 3.6.1, which stem...
CVE-2022-0867
The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users...
CVE-2022-0867
The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users...
CVE-2022-0867
The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users...