12179 matches found
WordPress Simple Membership plugin <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor vulnerability
Exposure of Private Personal Information to an Unauthorized Actor vulnerability discovered by Francesco Carlucci in WordPress Plugin Simple Membership versions = 4.5.5...
CVE-2024-11088
The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to...
CVE-2024-11088
The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to...
CVE-2024-11088 Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor
The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to...
CVE-2024-11088 Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor
The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to...
WordPress Simple Membership Plugin <= 4.5.5 is vulnerable to Sensitive Data Exposure
Software Simple Membership Type Plugin Vulnerable versions = 4.5.5 Fixed in 4.5.6 OWASP Top 10 A6: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-11088 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 18decf29b61f Credits Francesco Carlucci...
WordPress Plugin 'Really Simple Security Pro Multisite' 9.0.0 < 9.1.2 Authentication Bypass
The WordPress application running on the remote host has a version of the 'Really Simple Security Pro Multisite' plugin that is 9.0.x prior to 9.1.2. It is, therefore, affected by an authentication bypass vulnerability. This is due to improper user check error handling in the two-factor REST API...
WordPress plugin Simple Membership 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-16749 · WordPress · Simple Membership
Name of the Vulnerable Software and Affected Versions: The Simple Membership plugin for WordPress versions up to, and including, 4.5.5 Description: The issue allows unauthenticated attackers to extract sensitive data from restricted posts via the WordPress core search feature. This makes it...
WordPress Plugin 'Really Simple Security' 9.0.0 < 9.1.2 Authentication Bypass
The WordPress application running on the remote host has a version of the 'Really Simple Security' plugin that is 9.0.x prior to 9.1.2. It is, therefore, affected by an authentication bypass vulnerability. This is due to improper user check error handling in the two-factor REST API actions with t...
WordPress Plugin 'Really Simple Security Pro' 9.0.0 < 9.1.2 Authentication Bypass
The WordPress application running on the remote host has a version of the 'Really Simple Security Pro' plugin that is 9.0.x prior to 9.1.2. It is, therefore, affected by an authentication bypass vulnerability. This is due to improper user check error handling in the two-factor REST API actions wi...
CVE-2024-51899
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in seothemes Simple Pricing Table simple-pricing-table allows Stored XSS.This issue affects Simple Pricing Table: from n/a through = 1.0.0...
CVE-2024-51865
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in leroysabrina Simple Social Share Block simple-social-share-block allows Stored XSS.This issue affects Simple Social Share Block: from n/a through = 1.0.0...
CVE-2024-51633
Cross-Site Request Forgery CSRF vulnerability in ivycat Simple Page Specific Sidebars page-specific-sidebars allows Stored XSS.This issue affects Simple Page Specific Sidebars: from n/a through = 2.14.1...
CVE-2024-51633 WordPress Simple Page Specific Sidebars plugin <= 2.14.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in ivycat Simple Page Specific Sidebars page-specific-sidebars allows Stored XSS.This issue affects Simple Page Specific Sidebars: from n/a through = 2.14.1...
CVE-2024-51633 WordPress Simple Page Specific Sidebars plugin <= 2.14.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in ivycat Simple Page Specific Sidebars page-specific-sidebars allows Stored XSS.This issue affects Simple Page Specific Sidebars: from n/a through = 2.14.1...
CVE-2024-51633
CVE-2024-51633 describes a CSRF-driven Stored XSS in WordPress plugin Simple Page Specific Sidebars (affected versions: up to 2.14.1). The vulnerability arises from CSRF in the plugin that can lead to stored XSS content. Public sources confirm the vulnerability exists through 2.14.1, with patch s...
CVE-2024-51865
CVE-2024-51865 : The WordPress plugin Simple Social Share Block is affected by a Stored XSS due to improper input neutralization during page generation. Affected range is from a non-specified start through version 1.0.0. Public sources (Red Hat, CVE listings, and vulnerability databases) corrobor...
CVE-2024-51865 WordPress Simple Social Share Block plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in leroysabrina Simple Social Share Block simple-social-share-block allows Stored XSS.This issue affects Simple Social Share Block: from n/a through = 1.0.0...