CVE-2024-13642

The CVE refers to WordPress Stratum – Elementor Widgets (Stratum) plugin, vulnerable to Stored Cross-Site Scripting via the Image Hotspot widget. The issue exists in all versions up to and including 1.4.7 and stems from insufficient input sanitization and output escaping on user-supplied attribut...

CVE-2024-13642 Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hotspot widget in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress plugin Stratum – Elementor Widgets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2025-2233 · WordPress · Stratum – Elementor Widgets

Name of the Vulnerable Software and Affected Versions: Stratum – Elementor Widgets plugin for WordPress versions up to, and including, 1.4.7 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the Image Hotspot widget, allowing...

The vulnerability of the S1AP protocol implementation in the NextEPC module allows a violator to enhance their privileges.

The vulnerability of the S1AP protocol implementation in the NextEPC module is related to the execution of operations outside the stack buffer. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending a specially crafted NAS message...

Magma 代码问题漏洞

Magma is an open source software platform from Magma Open Source. An open, flexible and scalable mobile core network solution for network operators. A code issue vulnerability exists in Magma 1.8.0 and prior versions, which stems from the fact that the absence of the mandatory NASPDU field in the...

NextEPC MME 安全漏洞

NextEPC MME is an open source implementation of NextEPC's 4G/5G 3GPP core network. A security vulnerability exists in NextEPC MME 1.0.1 and prior versions, which stems from a heap buffer overflow in Emergency Number List decoding that allows an attacker to overwrite the stack by sending a special...

Magma 安全漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a stack overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted NAS packet...

Magma 安全漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted N...

Magma 缓冲区错误漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS via a crafted NAS...

Magma 安全漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted N...

Quectel BC95-CNV 安全漏洞

The Quectel BC95-CNV is a high-performance, low-power, multi-band LTE Cat NB2 wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in Quectel BC95-CNV version V100R001C00SPC051, which originated from a vulnerability that allows an attacker to...

Quectel BG96 安全漏洞

The Quectel BG96 is a LTE Cat M1/Cat NB1/EGPRS wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in the Quectel BG96 BG96MAR02A08M1G version that originates from a vulnerability that allows an attacker to bypass authentication via a crafted NA...

Quectel BC25 安全漏洞

The Quectel BC25 is a high-performance, low-power NB-IoT wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in the Quectel BC25 BC25PAR01A06 version, which originated from a vulnerability that allows an attacker to bypass authentication via a...

WordPress Stratum plugin <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates vulnerability

Authenticated Contributor+ Sensitive Information Exposure via Elementor Templates vulnerability discovered by Ankit Patel in WordPress Plugin Stratum versions = 1.4.4...

CVE-2024-10316

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.4 in includes/templates/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract...

CVE-2024-10316 Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.4 in includes/templates/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract...

CVE-2024-10316 Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.4 in includes/templates/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract...

WordPress plugin Stratum 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

WordPress Stratum Plugin <= 1.4.4 is vulnerable to Sensitive Data Exposure

Software Stratum Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-10316 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID eaf2b73a0382 Credits Ankit Patel Required privilege...