141 matches found
CVE-2024-38728
Server-Side Request Forgery SSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...
CVE-2024-38728 WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...
CVE-2024-38728 WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...
CVE-2024-38728
The CVE-2024-38728 entry concerns a Server-Side Request Forgery (SSRF) vulnerability in the Seraphinite Post .DOCX Source WordPress plugin (Seraphinite Post .DOCX Source). Affected versions are listed as n/a through 2.16.9. Public references indicate this is an SSRF issue where an attacker could ...
PT-2024-28174 · Unknown · Seraphinite Post .Docx Source
Name of the Vulnerable Software and Affected Versions: Seraphinite Post .DOCX Source versions n/a through 2.16.9 Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means that an attacker could potentially force the server to make requests to arbitrary domains, which...
CVE-2024-37940
Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Accelerator Full, premium.This issue affects Seraphinite Accelerator Full, premium: from n/a through 2.21.13...
CVE-2024-37940 WordPress Seraphinite Accelerator (Full, premium) plugin <= 2.21.13 - CSRF Leading to Arbitrary File Deletion vulnerability
Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Accelerator Full, premium.This issue affects Seraphinite Accelerator Full, premium: from n/a through 2.21.13...
CVE-2024-37940 WordPress Seraphinite Accelerator (Full, premium) plugin <= 2.21.13 - CSRF Leading to Arbitrary File Deletion vulnerability
Cross-Site Request Forgery CSRF vulnerability in Seraphinite Solutions Seraphinite Accelerator Full, premium.This issue affects Seraphinite Accelerator Full, premium: from n/a through 2.21.13...
CVE-2024-37940
CVE-2024-37940 is a CSRF in the WordPress plugin Seraphinite Accelerator Ext (full/premium) affecting versions up to 2.21.13. The vulnerability can lead to arbitrary file deletion due to CSRF, as documented in public references. A fix is indicated by the plugin’s 2.21.13 release (or subsequent pa...
WordPress plugin Seraphinite Accelerator Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2024-27845 · Liferay · Liferay Dxp +1
Name of the Vulnerable Software and Affected Versions: Seraphinite Accelerator Full, premium versions n/a through 2.21.13 Liferay Portal and DXP versions 7.0.0 through 7.4.3.87 Description: A Cross-Site Request Forgery CSRF vulnerability and a medium severity XSS vulnerability have been identifie...
WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Seraphinite Post .DOCX Source versions = 2.16.9...
WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Seraphinite Post .DOCX Source versions = 2.16.9...
WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.9 is vulnerable to Broken Access Control
Software Seraphinite Post .DOCX Source Type Plugin Vulnerable versions = 2.16.9 Fixed in 2.16.10 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38727 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 677670691e62 Credits Peng Zhou...
WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.9 is vulnerable to Server Side Request Forgery (SSRF)
Software Seraphinite Post .DOCX Source Type Plugin Vulnerable versions = 2.16.9 Fixed in 2.16.10 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-38728 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...
WordPress Seraphinite Accelerator (Full, premium) plugin <= 2.21.13 - CSRF Leading to Arbitrary File Deletion vulnerability
CSRF Leading to Arbitrary File Deletion vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Seraphinite Accelerator Full, premium versions = 2.21.13...
WordPress Seraphinite Accelerator (Full, premium) Plugin <= 2.21.13 is vulnerable to Cross Site Request Forgery (CSRF)
Software Seraphinite Accelerator Full, premium Type Plugin Vulnerable versions = 2.21.13 Fixed in 2.21.13.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37940 Patch priority Low CVSS severity Low 7.4 Developer Claim ownership PSID f1fc1258294f...
CVE-2024-22138
Insertion of Sensitive Information into Log File vulnerability in Seraphinite Solutions Seraphinite Accelerator.This issue affects Seraphinite Accelerator: from n/a through 2.20.47...
CVE-2024-22138
CVE-2024-22138 affects the WordPress Seraphinite Accelerator plugin (versions up to 2.20.47). Root cause: insertion of sensitive information into log files, enabling potential information exposure. Impact is unauthenticated; vulnerable component is the logging path used by the plugin. Remediation...
CVE-2024-22138 WordPress Seraphinite Accelerator plugin <= 2.20.47 - Sensitive Data Exposure via Log File vulnerability
Insertion of Sensitive Information into Log File vulnerability in Seraphinite Solutions Seraphinite Accelerator.This issue affects Seraphinite Accelerator: from n/a through 2.20.47...