CVE-2024-9104 UltimateAI <= 2.8.3 - Limited User Password Change due to Improper Empty and Missing Default Value Check

The UltimateAI plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.8.3. This is due to the improper empty value check and a missing default activated value check in the 'ultimateaichangepass' function. This makes it possible for unauthenticated...

CVE-2023-2843 MultiParcels Shipping For WooCommerce < 1.14.15 - Subscribers+ SQLi

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.15 does not properly sanitize and escape a parameter before using it in an SQL statement, which could allow any authenticated users, such as subscribers, to perform SQL Injection attacks...

introwebdesigns.com XSS vulnerability

On the 02.01.2018 security researcher reported a XSS vulnerability affecting the introwebdesigns.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 2 January, 20...

recul73.rssing.com XSS vulnerability

On the 29.12.2017 security researcher reported a XSS vulnerability affecting the recul73.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 29 December,...

bsozd748.rssing.com XSS vulnerability

On the 15.11.2017 security researcher reported a XSS vulnerability affecting the bsozd748.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 15 November,...

neocybium.rssing.com XSS vulnerability

On the 28.10.2017 security researcher reported a XSS vulnerability affecting the neocybium.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 28 October,...

gameshop-twente.nl XSS vulnerability

Vulnerable URL: https://www.gameshop-twente.nl/productpagina.php?p=1id=45385id=61514=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...