PT-2023-25681 · Michael Mann · Simple Site Verify Plugin

Name of the Vulnerable Software and Affected Versions: Michael Mann Simple Site Verify plugin versions 1.0.7 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions 1.0.7 an...

Simple Site Verify < 1.0.8 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress Plugin Simple Site Verify Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Plugin Simple Giveaways - Grow your business, email lists and traffic with contests Cross-site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Simple Giveaways - Grow your business,...

PT-2023-23142 · WordPress · Igor Benic Simple Giveaways

Name of the Vulnerable Software and Affected Versions: Igor Benic Simple Giveaways – Grow your business, email lists and traffic with contests plugin versions = 2.46.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attack...

WordPress Product Catalog Simple Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Product Catalog Simple Type Plugin Vulnerable versions = 1.7.5 Fixed in 1.7.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f2ff5330794a Credits Unknown Required...

CVE-2023-46627

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin = 2.1 versions...

CVE-2023-46627

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin = 2.1 versions...

CVE-2023-46627

A vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap.This issue affects WP Simple HTML Sitemap: from n/a through = 2.2...

CVE-2023-32298

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kathy Darling Simple User Listing plugin = 1.9.2 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin = 2.1 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kathy Darling Simple User Listing plugin = 1.9.2 versions...

CVE-2023-46627

CVE-2023-46627 affects WordPress plugin WP Simple HTML Sitemap (wp-simple-html-sitemap) up to version 2.2. The vulnerability is an unauthenticated Cross-Site Scripting (XSS) via the id parameter (Reflected XSS). Patch/mitigation: upgrade to version 2.3 or later. This CVE entry is supported by Pat...

CVE-2023-32298 WordPress Simple User Listing Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kathy Darling Simple User Listing plugin = 1.9.2 versions...

CVE-2023-32298

CVE-2023-32298 is a reflected XSS vulnerability in the WordPress plugin Simple User Listing (versions

mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c

A flaw was found in the MariaDB Server. A use-after-free in the component, mystrcasecmp8bit, can be exploited via specially crafted SQL statements, impacting availability...

mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, mywildcmp8bitimpl at /strings/ctype-simple.c, affecting availability...

[SECURITY] Fedora 38 Update: salt-3006.4-1.fc38

Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...

WordPress Mmm Simple File List Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

Software Mmm Simple File List Type Plugin Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4514 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2751f94a869f Credits Erwan LR WPScan Require...

WordPress Plugin Simple User Listing Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...