CVE-2023-25989

Cross-Site Request Forgery CSRF vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading...

CVE-2023-25989

Summary: CVE-2023-25989 is a CSRF vulnerability reported across multiple Meks WordPress plugins (Audio Player, Time Ago, ThemeForest Smart Widget, Smart Author Widget, Easy Maps, Easy Photo Feed Widget, Simple Flickr Widget, Easy Ads Widget, Smart Social Widget, and related plugins). The flaw ena...

WordPress Seriously Simple Stats Plugin <= 1.5.0 is vulnerable to SQL Injection

Software Seriously Simple Stats Type Plugin Vulnerable versions = 1.5.0 Fixed in 1.5.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-45001 Patch priority Low CVSS severity Low 8.5 Developer Castos PSID 84cb56be8542 Credits Rafie Muhammad Patchstack Required privilege Podcas...

WordPress WP Simple HTML Sitemap Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple HTML Sitemap Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45067 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5c63e779faff Credits deokhunKim Required...

The vulnerability of the Simple URLs plugin in the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Simple URLs plugin in the WordPress content management system exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks...

WordPress Seriously Simple Stats Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Seriously Simple Stats Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45005 Patch priority Medium CVSS severity Medium 7.1 Developer Castos PSID 48b02f9f86c3 Credits Rafie Muhammad...

CVE-2023-5260

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

CVE-2023-5260

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

CVE-2023-5260

The CVE-2023-5260 issue affects SourceCodester Simple Membership System 1.0, specifically the group_validator.php file where manipulating the club_id argument causes SQL injection. Documents indicate the attack can be initiated remotely and that exploits have been publicly disclosed. Connected so...

CVE-2023-5260 SourceCodester Simple Membership System group_validator.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

CVE-2023-5260 SourceCodester Simple Membership System group_validator.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

WordPress Shockingly Simple Favicon Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Shockingly Simple Favicon Type Plugin Vulnerable versions = 1.8.2 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2023-44246 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cb4ef9c92a27 Credits Nguyen...

PT-2023-31982 · Sourcecodester · Sourcecodester Simple Membership System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical issue has been found in the processing of the file group validator.php, where the manipulation of the club id argument leads to SQL injection. The attack can be...

Simple Membership System SQL Injection Vulnerability

Simple Membership System is a simple membership system by Razormist Personal Developer. A SQL injection vulnerability exists in Simple Membership System version 1.0, which stems from the parameter clubid in the file groupvalidator.php that can lead to sql injection...

The vulnerability lies in the cropImage function of the software tool for creating and distributing content with LG Simple Editor. This function allows a malicious user to delete any files they desire.

The vulnerability of the cropImage function in the software for creating and distributing content with LG Simple Editor arises due to a typing error during the processing of command-line arguments that handle directory traversal. Exploiting this vulnerability allows an attacker to send specially...

CVE-2023-43872

A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting XSS...

CVE-2023-43872

A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting XSS...

The vulnerability of the makeDetailContent method in the software tool for creating/distributing content in LG Simple Editor allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the makeDetailContent method in the LG Simple Editor’s content creation/distribution software lies in improper restrictions on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute arbitrary code...

PT-2023-27158 · Unknown · Mitchell Bennis Simple File List

Name of the Vulnerable Software and Affected Versions: Mitchell Bennis Simple File List plugin versions = 6.1.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Mitchell Bennis Simple Fil...