3079 matches found
CVE-2014-10391: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection...
CVE-2016-10930: Improper Input Validation
The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number...
CVE-2014-10389: Improper Authentication
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication...
PT-2019-14060
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system versions prior to 9.1.2 Description The issue allows for HTML injection. Recommendations For versions prior to 9.1.2, update to version 9.1.2 or later to resolve the issue...
PT-2019-7064
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns full path disclosure in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update t...
PT-2019-7063
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue is related to SQL injection in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update to...
PT-2019-7065
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns incorrect authentication in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, upda...
CVE-2019-15331: Improper Neutralization of Input During Web Page Generation
The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection...
PT-2019-7726
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 7.1.0 Description The issue is related to an insecure direct object reference via a ticket number. Recommendations For versions prior to 7.1.0, update to version 7.1.0 or later ...
CVE-2014-10390: Improper Limitation of a Pathname to a Restricted Directory
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal...
PT-2019-7067
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.1 Description The issue concerns JavaScript injection in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.1, update t...
CVE-2014-10388: Exposure of Sensitive Information to an Unauthorized Actor
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...
PT-2019-7066
Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns directory traversal in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update to...
CVE-2017-18513
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface...
Cross site request forgery (csrf)
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface...
CVE-2017-18513
Affected software: WordPress, plugin “responsive-menu” prior to 3.1.4. Root cause: missing CSRF protection in the admin interface. Vulnerability description: CVE-2017-18513 documents a CSRF risk for admin actions in the responsive-menu plugin. Multiple connected sources (Red Hat, CNVD, NVD, PRION...
CVE-2017-18513
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface...
PT-2019-8447
Name of the Vulnerable Software and Affected Versions WordPress responsive-menu plugin versions prior to 3.1.4 Description The issue concerns the lack of a CSRF protection mechanism for the admin interface in the responsive-menu plugin. Recommendations For versions prior to 3.1.4, update the...
