12179 matches found
WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Simple Notification versions = 1.3...
CVE-2024-53810
Missing Authorization vulnerability in N-Media Simple User Registration wp-registration allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Simple User Registration: from n/a through = 5.5...
CVE-2024-53810
The CVE-2024-53810 entry concerns the WordPress plugin Simple User Registration (versions up to 5.5). Reported as a Missing Authorization vulnerability, it allows accessing functionality that is not properly constrained by ACLs. Public details in connected sources confirm the root cause as broken...
PT-2024-35925 · Unknown · Najeeb Ahmad Simple User Registration
Name of the Vulnerable Software and Affected Versions: Najeeb Ahmad Simple User Registration versions through 5.5 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. This enables unauthorized access...
WordPress plugin Simple User Registration 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
frood, an Alpine initramfs NAS
My NAS, frood, has a bit of a weird setup. It’s just one big initramfs containing a whole Alpine Linux system. It’s delightful and I am not sure why it’s not more common. As long as the bootloader can find the kernel and initramfs, the machine comes up cleanly. A/B deployments and rollbacks are...
CVE-2024-12232
A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2024-12232
A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2024-12232 code-projects Simple CRUD Functionality index.php cross site scripting
A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2024-12232
CVE-2024-12232 affects Code-Projects Simple CRUD Functionality 1.0. The vulnerability occurs in an unknown code path of /index.php, where manipulation of the parameters newtitle and newdescr leads to cross-site scripting (XSS) . It is described as exploitable remotely with the exploit publicly di...
CVE-2024-11341
The Simple Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the settingspage function. This makes it possible for unauthenticated attackers to update the plugin's setting...
CVE-2024-11341
CVE-2024-11341 describes a CSRF vulnerability in the WordPress plugin Simple Redirection (versions
PT-2024-16923 · WordPress · Simple Redirection
Name of the Vulnerable Software and Affected Versions: Simple Redirection plugin for WordPress versions up to, and including, 1.5 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the settings page function. This allows unauthenticated...
WordPress plugin Simple Redirection 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
WordPress Simple Redirection plugin <= 1.5 - Cross-Site Request Forgery to Arbitrary Site Redirect vulnerability
Cross-Site Request Forgery to Arbitrary Site Redirect vulnerability discovered by SOPROBRO in WordPress Plugin Simple Redirection versions = 1.5...
Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security
PoC Authentication Bypass MFA Really Simple Security WordPress...
Apache Ozone 安全漏洞
Apache Ozone is an application of the US Apache Apache Foundation. A scalable, redundant and distributed object store for Hadoop and cloud-native environments. Apache Ozone version 1.4.0 suffers from an authentication error vulnerability that originates from an authentication error in an HTTP...
CVE-2024-53777
Cross-Site Request Forgery CSRF vulnerability in Alberto Reineri Simple Header and Footer simple-header-and-footer allows Stored XSS.This issue affects Simple Header and Footer: from n/a through = 1.0.0...
CVE-2024-53741
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Garrett Grimm Simple Popup simple-popup-plugin allows DOM-Based XSS.This issue affects Simple Popup: from n/a through = 4.6...