CVE-2023-47511

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SO WP Pinyin Slugs plugin = 2.3.0 versions...

CVE-2024-51817

CVE-2024-51817 affects CodeZel Combo WP Rewrite Slugs (version

CVE-2024-51817 WordPress Combo WP Rewrite Slugs plugin <= 1.0 - Settings Change vulnerability

Missing Authorization vulnerability in CodeZel Combo WP Rewrite Slugs combo-wp-rewrite-slugs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Combo WP Rewrite Slugs: from n/a through = 1.0...

CVE-2024-51817 WordPress Combo WP Rewrite Slugs plugin <= 1.0 - Settings Change vulnerability

Missing Authorization vulnerability in CodeZel Combo WP Rewrite Slugs combo-wp-rewrite-slugs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Combo WP Rewrite Slugs: from n/a through = 1.0...

WordPress plugin Combo WP Rewrite Slugs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

PT-2024-34944 · Codezel · Codezel Combo Wp Rewrite Slugs

Name of the Vulnerable Software and Affected Versions: CodeZel Combo WP Rewrite Slugs versions 1.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For CodeZel...

WordPress Combo WP Rewrite Slugs plugin <= 1.0 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Combo WP Rewrite Slugs versions = 1.0...

WordPress Combo WP Rewrite Slugs Plugin <= 1.0 is vulnerable to Settings Change

Software Combo WP Rewrite Slugs Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-51817 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e956307de9d1 Credits Mika Required privilege Subscrib...

Cross-site Scripting (XSS)

Overview baserproject/basercms is a Content management system based on CakePHP. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper handling of slugs on the article editing screen. An attacker can manipulate the output of the page by injecting malicious...

CVE-2024-0615

The Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0 via the API. This makes it possible for unauthenticated attackers to...

CVE-2024-0615 Content Control <= 2.1.0 - Missing Authorization to Sensitive Information Exposure

The Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0 via the API. This makes it possible for unauthenticated attackers to...

PT-2024-15691 · WordPress · The Content Control – The Ultimate Content Restriction Plugin

Name of the Vulnerable Software and Affected Versions: The Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More plugin for WordPress versions up to, and including, 2.1.0 Description: The plugin is vulnerable to Sensitive Information Exposur...

CVE-2024-2262

Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to make logged in users delete arbitrary filters via CSRF attack, granted they know the related filter slugs...

PT-2024-19503 · WordPress · Themify Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Themify WordPress plugin versions prior to 1.4.4 Description: The issue concerns a lack of CSRF check in the bulk action of the Themify WordPress plugin. This could allow attackers to make logged-in users delete arbitrary filters via a CSRF...

CVE-2024-30536

Cross-Site Request Forgery CSRF vulnerability in WPFactory Slugs Manager.This issue affects Slugs Manager: from n/a through 2.6.7...

CVE-2024-30536 WordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPFactory Slugs Manager.This issue affects Slugs Manager: from n/a through 2.6.7...

CVE-2024-30536 WordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPFactory Slugs Manager.This issue affects Slugs Manager: from n/a through 2.6.7...

CVE-2024-30536

Technical details for CVE-2024-30536 are not provided in the connected documents. No information on affected product/version, root cause, impact, or remediation is available here. Monitor for updates from the referenced sources.

WordPress Plugin Slugs Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-23465 · Wpfactory · Wpfactory Slugs Manager

Name of the Vulnerable Software and Affected Versions: WPFactory Slugs Manager versions 2.6.7 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For WPFactory Slugs Manage...