PT-2024-16883 · WordPress · Ebook Store

Name of the Vulnerable Software and Affected Versions: Ebook Store plugin for WordPress versions up to, and including, 5.8001 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows unauthenticated...

CVE-2024-11687

CVE-2024-11687 concerns the WordPress plugin “Next-Cart Store to WooCommerce Migration” (versions up to and including 3.9.2). The connected sources confirm a Reflected Cross-Site Scripting (XSS) vulnerability triggered via the page parameter, caused by insufficient input sanitization and output e...

WordPress plugin Custom Post Type to Map Store 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress plugin Top Store 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

WordPress Amilia Store Plugin <= 2.9.8 is vulnerable to Cross Site Scripting (XSS)

Software Amilia Store Type Plugin Vulnerable versions = 2.9.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50472 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c0d225726ac8 Credits SOPROBRO Required privilege Contributor...

WordPress Ebook Store plugin <= 5.8001 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Ebook Store versions = 5.8001...

CVE-2024-6567

The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001. This is due to the plugin utilizing fpdi-protection and not preventing direct access to test files that have displayerrors set to true. This makes it possible for unauthenticat...

WordPress Ebook Store Plugin <= 5.8001 is vulnerable to Sensitive Data Exposure

Software Ebook Store Type Plugin Vulnerable versions = 5.8001 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6567 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4d20c9d6d85a Credits stealthcopter Required privileg...

WordPress Music Store plugin <= 1.1.13 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Noriko Totsuka JPCERT/CC in WordPress Plugin Music Store versions = 1.1.13...

WordPress Plugin Shopping Cart & eCommerce Store 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2023-45602

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...

CVE-2023-45602

CVE-2023-45602 is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in the Shopfiles Ltd Ebook Store plugin for WordPress. Public references indicate affected versions are up to 5.785 (some sources list up to 5.784/5.8002). The issue is caused by reflected XSS and could enabl...

CVE-2023-45602 WordPress Ebook Store Plugin <= 5.785 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...

WordPress Ebook Store Plugin <= 5.8002 is vulnerable to Cross Site Scripting (XSS)

Software Ebook Store Type Plugin Vulnerable versions = 5.8002 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45602 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 98c678ae3282 Credits Le Ngoc Anh Required...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.775 versions...

CVE-2023-22690 WordPress Ebook Store Plugin <= 5.775 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.775 versions...

CVE-2023-22690

CVE-2023-22690 is a WordPress Ebook Store plugin vulnerability affecting versions ≤ 5.775. It is described as an authenticated (admin+) Stored Cross-Site Scripting (XSS) flaw. Public details in Patchstack indicate the issue has been fixed in version 5.78, addressing the XSS vector. The NVD entry ...

PT-2023-18635 · Unknown · Ebook Store Plugin

Name of the Vulnerable Software and Affected Versions: Ebook Store plugin versions = 5.775 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Ebook Store plugin versions = 5.775, update to ...

WordPress Ebook Store Plugin <= 5.775 is vulnerable to Cross Site Scripting (XSS)

Software Ebook Store Type Plugin Vulnerable versions = 5.775 Fixed in 5.78 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-22690 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bf3f6e253a15 Credits yuyudhn Required privilege...