PT-2024-23482 · Unknown · Wppdf.Org Responsive Flipbook

Name of the Vulnerable Software and Affected Versions: wppdf.Org Responsive flipbook versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting XSS vulnerability. This allows for the...

CVE-2024-30447

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Solutions Creative Image Slider – Responsive Slider Plugin allows Reflected XSS.This issue affects Creative Image Slider – Responsive Slider Plugin: from n/a through 2.1.3...

CVE-2024-30447

Technical details about CVE-2024-30447 (Creative Image Slider – Responsive Slider Plugin) are not provided in the connected documents. No product version, root cause, impact, or patch information is publicly available here; monitor for official advisories and vendor/user notifications.

CVE-2024-30497

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through 1.1.17...

CVE-2024-30497

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through 1.1.17...

CVE-2024-30497

CVE-2024-30497 denotes an SQL injection vulnerability in the WP Responsive Tabs (horizontal, vertical, and accordion Tabs) WordPress plugin. Affected versions are

WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Responsive Image Gallery, Gallery Album versions = 2.0.3...

CVE-2024-2848

The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savefootertextcallback function in all versions up to, and including, 5.0.2. This makes it possible for unauthenticated attackers to inject arbitrary HTML content into th...

CVE-2024-2848 Responsive <= 5.0.2 - Missing Authorization to HTML Injection

The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savefootertextcallback function in all versions up to, and including, 5.0.2. This makes it possible for unauthenticated attackers to inject arbitrary HTML content into th...

WordPress Responsive flipbook plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Responsive flipbook versions = 1.0.0...

WordPress Lightbox slider – Responsive Lightbox Gallery plugin <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection vulnerability

Authenticated Contributor+ PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Lightbox slider – Responsive Lightbox Gallery versions = 1.9.9...

CVE-2024-1858 Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection

The Lightbox slider – Responsive Lightbox Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.9 via deserialization of untrusted input through post meta data. This makes it possible for authenticated attackers, with contributor-level access...

WordPress Responsive flipbook Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Responsive flipbook Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30552 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a99f84dea2e3 Credits LVT-tholv2k Required privilege...

PT-2024-23423 · WordPress · Wp Responsive Tabs Horizontal Vertical/Accordion Tabs

Name of the Vulnerable Software and Affected Versions: WP Responsive Tabs horizontal vertical and accordion Tabs versions 1.1.17 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows f...

WordPress Plugin WP Responsive Tabs horizontal vertical and accordion Tabs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Plugin Responsive 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-23375 · WordPress · Creative Image Slider

Name of the Vulnerable Software and Affected Versions: Creative Image Slider – Responsive Slider Plugin versions n/a through 2.1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS...

WordPress Lightbox slider – Responsive Lightbox Gallery Plugin <= 1.9.9 is vulnerable to PHP Object Injection

Software Lightbox slider – Responsive Lightbox Gallery Type Plugin Vulnerable versions = 1.9.9 Fixed in 1.10.0 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-1858 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID c570605cfccd Credits...

PT-2024-22447 · WordPress · Responsive

Name of the Vulnerable Software and Affected Versions: The Responsive theme for WordPress versions up to, and including, 5.0.2 Description: The issue allows unauthorized modification of data due to a missing capability check on the save footer text callback function. This makes it possible for...

CVE-2024-3039

Affected software: Shanghai Brad Technology BladeX 3.4.0. Vulnerable component: API endpoint /api/blade-user/export-user. Root cause: SQL injection via input manipulation using updatexml(1,concat(0x3f,md5(123456),0x3f),1)=1). Impact: potential remote exploitation allowing unauthorized access or d...