141 matches found
CVE-2024-22138
Insertion of Sensitive Information into Log File vulnerability in Seraphinite Solutions Seraphinite Accelerator.This issue affects Seraphinite Accelerator: from n/a through 2.20.47...
CVE-2023-48279
Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6...
CVE-2023-49740
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seraphinite Solutions Seraphinite Accelerator allows Reflected XSS.This issue affects Seraphinite Accelerator: from n/a through 2.20.28...
CVE-2023-5609
The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
WordPress Seraphinite Accelerator plugin <= 2.27.21 - Cross-Site Request Forgery to Multiple Administrative Actions vulnerability
Cross-Site Request Forgery to Multiple Administrative Actions vulnerability discovered by Nabil Irawan in WordPress Plugin Seraphinite Accelerator versions = 2.27.21...
CVE-2024-37940
Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Accelerator Full, premium.This issue affects Seraphinite Accelerator Full, premium: from n/a through 2.21.13...
WordPress Seraphinite Accelerator plugin <= 2.22.15 - Authenticated Sensitive Data Exposure vulnerability
Authenticated Sensitive Data Exposure vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Seraphinite Accelerator versions = 2.22.15...
WordPress Seraphinite Accelerator (Full, premium) plugin <= 2.21.13 - Authenticated Sensitive Data Exposure vulnerability
Authenticated Sensitive Data Exposure vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Seraphinite Accelerator Full, premium versions = 2.21.13...
WordPress Seraphinite Bulk Discounts for WooCommerce plugin <= 2.4.6 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Seraphinite Bulk Discounts for WooCommerce versions = 2.4.6...
CVE-2024-12160 Seraphinite Bulk Discounts for WooCommerce <= 2.4.6 - Reflected Cross-Site Scripting
The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.6. This makes it possible for unauthenticated attackers to inject...
CVE-2024-12160
CVE-2024-12160 affects the Seraphinite Bulk Discounts for WooCommerce plugin (WordPress). The issue is a reflected Cross-Site Scripting vulnerability caused by using add_query_arg without proper escaping in the URL for all versions up to 2.4.6. This allows unauthenticated attackers to inject arbi...
CVE-2024-12160 Seraphinite Bulk Discounts for WooCommerce <= 2.4.6 - Reflected Cross-Site Scripting
The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.6. This makes it possible for unauthenticated attackers to inject...
WordPress plugin Seraphinite Bulk Discounts for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2024-38727
Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...
CVE-2024-38727 WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...
CVE-2024-38727 WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...
CVE-2024-38727
CVE-2024-38727 is a Missing Authorization (broken access control) vulnerability affecting the Seraphinite Post .DOCX Source WordPress plugin. The public record indicates the issue exists in Seraphinite Post .DOCX Source versions from unknown/n/a through 2.16.9 and does not provide product-specifi...
PT-2024-28173 · Unknown · Seraphinite Post
Name of the Vulnerable Software and Affected Versions: Seraphinite Post .DOCX Source versions n/a through 2.16.9 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For...
WordPress plugin Seraphinite Post .DOCX Source 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
