2432 matches found
CVE-2023-45725
Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document. These design document functions are: list show rewrite update An attacker can leak the session component using an HTML-like output,...
CVE-2023-45725
Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document. These design document functions are: list show rewrite update An attacker can leak the session component using an HTML-like output,...
CVE-2023-45725: Exposure of Sensitive Information to an Unauthorized Actor
Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document. These design document functions are: list show rewrite update An attacker can leak the session component using an HTML-like output,...
CVE-2023-5974
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery SSRF via the path parameter...
CVE-2023-5974
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery SSRF via the path parameter...
CVE-2023-4922
The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the path parameter...
CVE-2023-4922
The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the path parameter...
Server side request forgery (ssrf)
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery SSRF via the path parameter...
CVE-2023-4922
Summary of CVE-2023-4922 : The WPB Show Core WordPress plugin (versions up to and including 2.2) is vulnerable to an unauthenticated local file inclusion via the path parameter. The attack surface centers on a local file inclusion in the plugin, exemplified by PoCs targeting files such as /etc/re...
CVE-2023-4922 WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion
The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the path parameter...
CVE-2023-5974
The CVE-2023-5974 issue affects the WordPress plugin WPB Show Core up to version 2.2. The vulnerability is a Server-Side Request Forgery (SSRF) in download-file.php via the path parameter, allowing unauthenticated attackers to induce the server to request arbitrary URLs. Exploitation details in c...
CVE-2023-5974 WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery SSRF via the path parameter...
CVE-2023-5974 WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery SSRF via the path parameter...
Design/Logic Flaw
Mattermost fails to properly validate the "Show Full Name" option in a few endpoints in Mattermost Boards, allowing a member to get the full name of another user even if the Show Full Name option was disabled...
PT-2023-31118 · WordPress · Wpb Show Core
Name of the Vulnerable Software and Affected Versions: WPB Show Core WordPress plugin versions through 2.2 Description: The issue concerns a local file inclusion vulnerability via the path parameter. This allows for potential unauthorized access to sensitive files on the system. Recommendations:...
PT-2023-32453 · WordPress · Wpb Show Core
Name of the Vulnerable Software and Affected Versions: WPB Show Core WordPress plugin versions through 2.2 Description: The issue concerns server-side request forgery SSRF via the path parameter. This allows for potentially malicious requests to be made to the server. Recommendations: For WPB Sho...
WordPress plugin WPB Show Core security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress plugin WPB Show Core security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
