1838 matches found
CVE-2024-8430
The Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the spicestartersitesimportercreater function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to import demo conte...
CVE-2024-8430
CVE-2024-8430 : Spice Starter Sites for WordPress is vulnerable through a missing capability check in spice_starter_sites_importer_creater, affecting all versions up to and including 1.2.5. This enables unauthenticated attackers to import demo content and potentially modify data. Connected source...
WordPress Spice Starter Sites Plugin <= 1.2.5 is vulnerable to Broken Access Control
Software Spice Starter Sites Type Plugin Vulnerable versions = 1.2.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-8430 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ca56217f72c4 Credits Lucio Sá Required privilege...
WordPress plugin Spice Starter Sites 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
PT-2024-39007 · WordPress · Spice Starter Sites
Name of the Vulnerable Software and Affected Versions: Spice Starter Sites plugin for WordPress versions 1.2.5 and earlier Description: The issue allows unauthorized modification of data due to a missing capability check on the spice starter sites importer creater function. This makes it possible...
CVE-2024-44003
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through 1.2.5...
CVE-2024-44003
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through = 1.2.5...
CVE-2024-44003 WordPress Spice Starter Sites plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through 1.2.5...
CVE-2024-44003 WordPress Spice Starter Sites plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through = 1.2.5...
CVE-2024-44003
CVE-2024-44003 describes a Reflected Cross‑Site Scripting vulnerability in the WordPress plugin Spice Starter Sites . Affected versions are
WordPress plugin Spice Starter Sites 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...
PT-2024-30868 · Unknown · Spice Starter Sites
Name of the Vulnerable Software and Affected Versions: Spice Starter Sites versions 1.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: F...
WordPress Spice Starter Sites plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Spice Starter Sites versions = 1.2.5...
RHSA-2021:1924 Red Hat Security Advisory: spice security update
Bulletin has no description...
RHSA-2021:1791 Red Hat Security Advisory: spice-vdagent security and bug fix update
Bulletin has no description...
RHSA-2020:4187 Red Hat Security Advisory: spice and spice-gtk security update
Bulletin has no description...
RHSA-2020:4186 Red Hat Security Advisory: spice and spice-gtk security update
Bulletin has no description...
RHSA-2020:4185 Red Hat Security Advisory: spice and spice-gtk security update
Bulletin has no description...