CVE-2024-29818

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

CVE-2024-29818 WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

CVE-2024-29818

CVE-2024-29818 – Stored XSS in WP Poll Maker (Poll Maker & Voting Plugin) for WordPress. Root cause: Improper neutralization of input during web page generation (Cross-site Scripting). Affected: WP Poll Maker versions from n/a through 3.1. The connected Red Hat entry repeats the same description;...

CURL-CVE-2024-2004 Usage of disabled protocol

When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...

CVE-2024-2004 Usage of disabled protocol

When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...

CVE-2024-29919

Technical details about CVE-2024-29919 are not provided in the supplied documents. No information on affected versions, exploit status, or remediation is present. Monitor for updates.

CVE-2023-49815 WordPress WappPress plugin <= 5.0.3 - Unauthenticated Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in WappPress Team WappPress.This issue affects WappPress: from n/a through 5.0.3...

CVE-2024-2210

The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Team Member Listing widget. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrar...

CVE-2024-2210

The CVE-2024-2210 entry pertains to The Plus Addons for Elementor WordPress plugin. It enables Local File Inclusion via the Team Member Listing widget in all versions up to 5.4.1, allowing authenticated users with contributor privileges or higher to include and execute arbitrary PHP code from ser...

CVE-2024-2210 The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing

The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Team Member Listing widget. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrar...

CVE-2024-30233

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1...

CVE-2024-30234

Missing Authorization vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1...

CVE-2024-30234

CVE-2024-30234 is a Missing Authorization vulnerability in WholesaleX (Wholesale X – WooCommerce Wholesale Plugin). Public information from Red Hat and CVE records indicates the issue affects WholesaleX versions n/a through 1.3.1. The NVD metrics show CVSS v3.1 base score 8.8 (High) with NETWORK ...

CVE-2024-30233 WordPress WholesaleX plugin <= 1.3.1 - Sensitive Data Exposure on User Export vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1...

CVE-2024-2865

creationtimestamp| type| source ---|---|--- 2024-03-26 09:32:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6857 2024-03-26 09:32:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6858...

PT-2024-19206 · WordPress · The Plus Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor plugin for WordPress versions up to, and including, 5.4.1 Description: The issue allows authenticated attackers with contributor-level access and above to include and execute arbitrary files on the server via the...

CVE-2024-29197

creationtimestamp| type| source ---|---|--- 2024-03-25 11:55:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6849...

Internet Bug Bounty: Libuv: Improper Domain Lookup that potentially leads to SSRF attacks

The vulnerability in the libuv library was caused by the improper truncation of hostnames to 256 characters before calling the getaddrinfo function. This behavior allowed the creation of addresses like 0x00007f000001, which were considered valid by getaddrinfo, potentially leading to SSRF attacks...

team-match.com Cross Site Scripting vulnerability OBB-3878870

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Team Members Plugin < 5.3.2 is vulnerable to Cross Site Scripting (XSS)

Software Team Members Type Plugin Vulnerable versions 5.3.2 Fixed in 5.3.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1331 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID fdcd0cb6fba4 Credits Dmitrii Ignatyev Required...