CVE-2023-34283 NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability

NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2023-34283

CVE-2023-34283 — NETGEAR RAX30 USB Share Link Information Disclosure : The issue arises from how the router handles symbolic links on removable USB media. By creating a symbolic link, a physically present attacker can abuse the router’s web server to access arbitrary local files, revealing sensit...

CVE-2023-34283 NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability

NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2024-33930

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97...

CVE-2024-33930 WordPress Share This Image plugin <= 1.97 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97...

CVE-2024-33930 WordPress Share This Image plugin <= 1.97 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97...

CVE-2024-33930

CVE-2024-33930 is a URL Open Redirect in the Share This Image WordPress plugin. The vulnerability affects Share This Image versions up to 1.97 (per the CVE entry) and is classified as an Open Redirect with network attack vector and user interaction required. Red Hat and Wordfence references in co...

WordPress Share This Image plugin <= 1.98 - Open Redirection vulnerability

Open Redirection vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Share This Image versions = 1.98...

WordPress Social Share Buttons by Supsystic plugin <= 2.2.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Social Share Buttons by Supsystic versions = 2.2.9...

WordPress Share This Image Plugin <= 1.98 is vulnerable to Open Redirection

Software Share This Image Type Plugin Vulnerable versions = 1.98 Fixed in 1.99 OWASP Top 10 A3: Injection Classification Open Redirection CVE CVE-2024-33930 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 8ff8b7f51b08 Credits stealthcopter Required privilege Unauthenticate...

WordPress Social Share Buttons by Supsystic Plugin <= 2.2.9 is vulnerable to Broken Access Control

Software Social Share Buttons by Supsystic Type Plugin Vulnerable versions = 2.2.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-47330 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 619b2c170607 Credits Abdi...

WordPress Social Share Icons & Social Share Buttons plugin <= 3.6.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Social Share Icons & Social Share Buttons versions = 3.6.1...

WordPress Sassy Social Share plugin < 3.3.61 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Sassy Social Share versions 3.3.61...

WordPress Social Media & Share Icons Plugin <= 2.8.6 is vulnerable to Broken Access Control

Software Social Media & Share Icons Type Plugin Vulnerable versions = 2.8.6 Fixed in 2.8.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31435 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1a7903f770f4 Credits Dhabaleshwar Das...

WordPress Sassy Social Share Plugin < 3.3.61 is vulnerable to Cross Site Scripting (XSS)

Software Sassy Social Share Type Plugin Vulnerable versions 3.3.61 Fixed in 3.3.61 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2159 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2e895f7060f3 Credits Dmitrii Ignatyev...

WordPress Social Share Icons & Social Share Buttons Plugin <= 3.6.1 is vulnerable to Broken Access Control

Software Social Share Icons & Social Share Buttons Type Plugin Vulnerable versions = 3.6.1 Fixed in 3.6.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31435 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9b34a062d9ab Credits...

WordPress Social Share Icons & Social Share Buttons plugin <= 3.6.2 - Broken Access Control lead to Notice Dismissal vulnerability

Broken Access Control lead to Notice Dismissal vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Social Share Icons & Social Share Buttons versions = 3.6.2...

WordPress Social Share Icons & Social Share Buttons Plugin <= 3.6.2 is vulnerable to Broken Access Control

Software Social Share Icons & Social Share Buttons Type Plugin Vulnerable versions = 3.6.2 Fixed in 3.6.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32820 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 28d013722f27 Credits Mik...

WordPress Social Media Share Buttons plugin < 2.8.9 - Admin+ Stored XSS via settings vulnerability

Admin+ Stored XSS via settings vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Social Media & Share Icons versions 2.8.9...

CVE-2024-2118

CVE-2024-2118 affects the WordPress plugin Social Media Share Buttons & Social Sharing Icons (Ultimate Social Media Icons) up to version 2.8.9. The issue is due to insufficient sanitization/escaping of certain settings, enabling Stored XSS by high-privilege users (e.g., admins), including scenari...