WordPress plugin Custom Shortcode Sidebars 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Custom Shortcode Sidebars plugin <= 1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Custom Shortcode Sidebars versions = 1.2...

CVE-2024-10216

The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'addsidebar' and 'removesidebar' functions in all versions up to, and including, 2.9.11. This makes it possible for authenticate...

CVE-2024-51633

Cross-Site Request Forgery CSRF vulnerability in ivycat Simple Page Specific Sidebars page-specific-sidebars allows Stored XSS.This issue affects Simple Page Specific Sidebars: from n/a through = 2.14.1...

CVE-2024-51633 WordPress Simple Page Specific Sidebars plugin <= 2.14.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ivycat Simple Page Specific Sidebars page-specific-sidebars allows Stored XSS.This issue affects Simple Page Specific Sidebars: from n/a through = 2.14.1...

CVE-2024-51633 WordPress Simple Page Specific Sidebars plugin <= 2.14.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ivycat Simple Page Specific Sidebars page-specific-sidebars allows Stored XSS.This issue affects Simple Page Specific Sidebars: from n/a through = 2.14.1...

CVE-2024-51633

CVE-2024-51633 describes a CSRF-driven Stored XSS in WordPress plugin Simple Page Specific Sidebars (affected versions: up to 2.14.1). The vulnerability arises from CSRF in the plugin that can lead to stored XSS content. Public sources confirm the vulnerability exists through 2.14.1, with patch s...

WordPress plugin Simple Page Specific Sidebars 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2024-34777 · Ivycat Web Services · Ivycat Web Services Simple Page Specific Sidebars

Name of the Vulnerable Software and Affected Versions: IvyCat Web Services Simple Page Specific Sidebars versions through 2.14.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in IvyCat Web Services Simple Page Specific Sidebars. Recommendations:...

WordPress Simple Page Specific Sidebars plugin <= 2.14.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Simple Page Specific Sidebars versions = 2.14.1...

WordPress Simple Page Specific Sidebars Plugin <= 2.14.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Simple Page Specific Sidebars Type Plugin Vulnerable versions = 2.14.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51633 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a77d8baa7835 Credits...

CVE-2024-29762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.8.1...

CVE-2024-29762 WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.8.1...

CVE-2024-29762

CVE-2024-29762 is a Stored XSS in the WordPress plugin Off-Canvas Sidebars & Menus (Slidebars) due to improper input neutralization during web page generation. Affected versions are up to and including 0.5.8.1 (vendor states vulnerability exists from n/a through 0.5.8.1). Root cause: improper neu...

WordPress Plugin Off-Canvas Sidebars & Menus 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-23003 · Unknown · Off-Canvas Sidebars & Menus

Name of the Vulnerable Software and Affected Versions: Off-Canvas Sidebars & Menus Slidebars versions 0.5.8.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker...

WordPress Off-Canvas Sidebars & Menus (Slidebars) Plugin <= 0.5.8.1 is vulnerable to Cross Site Scripting (XSS)

Software Off-Canvas Sidebars & Menus Slidebars Type Plugin Vulnerable versions = 0.5.8.1 Fixed in 0.5.8.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29762 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aaadebb866ec Credits LVT-tholv2k...

CVE-2023-31091

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...

CVE-2023-31091

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...

CVE-2023-31091 WordPress Dynamically Register Sidebars Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...