PT-2024-34742 · Unknown · Russell Albin Simple Business Manager

Name of the Vulnerable Software and Affected Versions: Russell Albin Simple Business Manager versions n/a through 4.6.7.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This problem allows for Stored XSS,...

WordPress plugin Simple Job Manager SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress plugin Simple Modal 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin SVT Simple 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34744 · Unknown · Simple Job Manager

Name of the Vulnerable Software and Affected Versions: Simple Job Manager versions n/a through 1.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations:...

PT-2024-34864 · Unknown · Simple Modal

Name of the Vulnerable Software and Affected Versions: Simple Modal versions 0.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: For...

WordPress Simple Social Share Block Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Social Share Block Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51865 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8b3f455be888 Credits SOPROBRO Required privilege...

WordPress plugin Simple Shortcode for Google Maps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A security vulnerability exists ...

WordPress Simple Pricing Table Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Pricing Table Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51899 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9febfac93934 Credits SOPROBRO Required privilege...

PT-2024-8207

Name of the Vulnerable Software and Affected Versions Really Simple Security Free, Pro, and Pro Multisite versions 9.0.0 through 9.1.1.1 Description The Really Simple Security plugins for WordPress are affected by an authentication bypass issue. This is due to improper user check error handling i...

CVE-2024-9667

The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.5.0. This makes it possible for unauthenticated attackers to inject arbitrary web...

PT-2024-39749 · WordPress · Seriously Simple Podcasting

Name of the Vulnerable Software and Affected Versions: Seriously Simple Podcasting plugin for WordPress versions up to, and including, 3.5.0 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated attackers to inject arbitrary web...

WordPress plugin Seriously Simple Podcasting 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Seriously Simple...

WordPress Seriously Simple Podcasting plugin <= 3.5.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Seriously Simple Podcasting versions = 3.5.0...

WordPress SVT Simple plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin SVT Simple versions = 1.0.1...

WordPress Simple Modal plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Simple Modal versions = 0.3.3...

WordPress Simple Modal Plugin <= 0.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Simple Modal Type Plugin Vulnerable versions = 0.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51718 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 97fa1290c928 Credits João Pedro S Alcântara Kinorth Requir...

WordPress Seriously Simple Podcasting Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Seriously Simple Podcasting Type Plugin Vulnerable versions = 3.5.0 Fixed in 3.6.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9667 Patch priority Medium CVSS severity Medium 7.1 Developer Castos PSID 0de852fa37f5 Credits Webbernaut...

WordPress SVT Simple Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software SVT Simple Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51759 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 73a2fdbefeb6 Credits João Pedro S Alcântara Kinorth Required...

CVE-2024-10702

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...