15315 matches found
CVE-2024-5686
The WPZOOM Addons for Elementor Templates, Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Team Members widget in all versions up to, and including, 1.1.38 due to insufficient input sanitization and output escaping. This makes ...
CVE-2024-5686
The WPZOOM Addons for Elementor Templates, Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Team Members widget in all versions up to, and including, 1.1.38 due to insufficient input sanitization and output escaping. This makes ...
CVE-2024-5686
CVE-2024-5686 affects the WordPress plugin “WPZOOM Addons for Elementor (Templates, Widgets)”. The vulnerability is a Stored Cross-Site Scripting in the Team Members widget via the url attribute, present in all versions up to 1.1.38. The root cause is insufficient input sanitization and output es...
PT-2024-37082 · Wpzoom · Wpzoom Addons For Elementor
Name of the Vulnerable Software and Affected Versions: WPZOOM Addons for Elementor plugin versions up to, and including, 1.1.38 Description: The issue is related to Stored Cross-Site Scripting via the url attribute within the plugin's Team Members widget due to insufficient input sanitization and...
Spring Tips: Introducing Spring Modulith
Hi, Spring fans! In this installment we look at the amazing Spring Modulith project. It's goal is to help you better structure your codebase for architectural scalability. It's an amazing and refreshing approach to building applications. Think of it like a chance to pair program on the architectu...
GHSA-64JQ-M7RQ-768H Rancher's External RoleTemplates can lead to privilege escalation
Impact A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplateobjects when external=true, which in specific scenarios can lead to privilege escalation. The bug in the webhook rule resolver ignores rules from a ClusterRole for external...
CVE-2024-36416
creationtimestamp| type| source ---|---|--- 2024-06-12 06:33:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7618...
CVE-2023-51519
Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2...
CVE-2023-51519
Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2...
CVE-2023-51519 WordPress Slider by Soliloquy – Responsive Image Slider for WordPress plugin <= 2.7.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2...
CVE-2024-35628
Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25...
CVE-2024-35628
Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25...
CVE-2024-35754
CVE-2024-35754 affects Ovic Importer (WordPress plugin) up to version 1.6.3. The issue is an improper limitation of a pathname to a restricted directory, enabling authenticated Arbitrary File Download (path traversal). Root cause is insufficient path validation in the importer’s file access logic...
CVE-2024-35741 WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7...
CVE-2024-32701
CVE-2024-32701 corresponds to a Missing Authorization vulnerability in InstaWP Connect (InstaWP Team) affecting InstaWP Connect: from n/a through 0.1.0.24. Public records (NVD/Red Hat/ PatchStack) describe a broken access control issue that could allow unauthorized actions without proper authoriz...
CVE-2024-33547
Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...
CVE-2024-33547
Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...
CVE-2024-33545
Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...