20 matches found
CVE-2023-45642
Cross-Site Request Forgery CSRF vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...
EUVD-2023-45759
Malicious code in bioql PyPI...
EUVD-2023-49934
Malicious code in bioql PyPI...
CVE-2023-41242
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...
CVE-2023-45642
Cross-Site Request Forgery CSRF vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...
CVE-2023-45642
Cross-Site Request Forgery CSRF vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...
CVE-2023-45642
CVE-2023-45642 affects the WordPress Snap Pixel plugin (<= 1.5.7). The vulnerability is Cross-Site Request Forgery (CSRF) with unauthenticated attacker privileges, as documented by Patchstack and Red Hat/Redemption feeds, and reflected in CVSS metrics (NVD: 8.8, HIGH; Patchstack: 5.4, MEDIUM d...
CVE-2023-45642 WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...
WordPress Plugin Snap Pixel Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Snap Pixel...
PT-2023-29619 · Unknown · Hassan Ali Snap Pixel Plugin
Name of the Vulnerable Software and Affected Versions: Hassan Ali Snap Pixel plugin versions = 1.5.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)
Software Snap Pixel Type Plugin Vulnerable versions = 1.5.7 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45642 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 710c94b96abe Credits Prasanna V Balaji Required...
CVE-2023-41242
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...
CVE-2023-41242
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...
CVE-2023-41242 WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...
CVE-2023-41242 WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...
CVE-2023-41242
CVE-2023-41242 refers to the WordPress Snap Pixel plugin and is a Stored Cross-Site Scripting (XSS) vulnerability affecting versions
WordPress plugin Snap Pixel cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2023-27865 · Unknown · Hassan Ali Snap Pixel
Name of the Vulnerable Software and Affected Versions: Hassan Ali Snap Pixel plugin versions 1.5.7 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Hassan Ali Snap Pixel plugin. This vulnerability requires authentication with admin+...
Snap Pixel <= 1.5.7 - Admin+ Stored XSS
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)
Software Snap Pixel Type Plugin Vulnerable versions = 1.5.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41242 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 81eb2fe06a20 Credits Rio Darmawan Required privileg...