12179 matches found
WordPress Simple Load More plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Simple Load More versions = 1.0...
WordPress Simple Custom Admin plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Simple Custom Admin versions = 1.2...
WordPress Simple Custom Admin Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
Software Simple Custom Admin Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49647 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3970364b5682 Credits Mika Required privilege...
WordPress Simple Membership Plugin <= 4.5.3 is vulnerable to Open Redirection
Software Simple Membership Type Plugin Vulnerable versions = 4.5.3 Fixed in 4.5.4 OWASP Top 10 A3: Injection Classification Open Redirection CVE CVE-2024-49682 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 0c7afbddabf9 Credits Muhamad Agil Fachrian Required privilege...
CVE-2024-49613
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Lodel Geraldo Simple Code Insert Shortcode allows SQL Injection.This issue affects Simple Code Insert Shortcode: from n/a through 1.0...
CVE-2024-49613
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in developersnote Simple Code Insert Shortcode simple-code-insert-shortcode allows SQL Injection.This issue affects Simple Code Insert Shortcode: from n/a through = 1.0...
CVE-2024-49613
CVE-2024-49613 describes an SQL Injection in the WordPress plugin Simple Code Insert Shortcode (vulnerable:
CVE-2024-49604
Authentication Bypass Using an Alternate Path or Channel vulnerability in Najeeb Ahmad Simple User Registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through 5.5...
CVE-2024-49604
Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through = 6.7...
CVE-2024-49604
CVE-2024-49604 targets WordPress plugin Simple User Registration (versions n/a–5.5). The issue is an Authentication Bypass via an alternate path or channel, enabling account takeovers as described in multiple sources. Public records list the vulnerability with a critical impact (base score up to ...
CVE-2024-49604 WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through = 6.7...
WordPress plugin Simple User Registration 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by stealthcopter in WordPress Plugin Simple User Registration versions = 6.7...
WordPress Simple User Registration Plugin <= 6.0 is vulnerable to Broken Authentication
Software Simple User Registration Type Plugin Vulnerable versions = 6.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-49604 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 22ee8177d626 Credits...
WordPress Simple Code Insert Shortcode Plugin <= 1.0 is vulnerable to SQL Injection
Software Simple Code Insert Shortcode Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-49613 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID df05b471af58 Credits João Pedro S Alcântara Kinorth Required...
CVE-2024-49295
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PressTigers Simple Testimonials Showcase simple-testimonials-showcase allows Stored XSS.This issue affects Simple Testimonials Showcase: from n/a through = 1.1.6...
CVE-2024-49295
CVE-2024-49295 (WordPress: Simple Testimonials Showcase) The vulnerability is an XSS in the Simple Testimonials Showcase plugin for WordPress, affecting version
CVE-2024-48025
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dogrow Simple Baseball Scoreboard simple-baseball-scoreboard allows Stored XSS.This issue affects Simple Baseball Scoreboard: from n/a through = 1.3...
CVE-2024-48025 WordPress Simple Baseball Scoreboard plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in DOGROW.NET Simple Baseball Scoreboard allows Stored XSS.This issue affects Simple Baseball Scoreboard: from n/a through 1.3...