110 matches found
Eleven Vulnerabilities Patched in Royal Elementor Addons
On December 23, 2022, the Wordfence Threat Intelligence team initiated the responsible disclosure process for a set of 11 vulnerabilities in Royal Elementor Addons, a WordPress plugin with over 100,000 installations. The plugin developers responded on December 26, and we sent over the full...
CVE-2022-27847
Cross-Site Request Forgery CSRF vulnerability in Yooslider Yoo Slider = 2.0.0 on WordPress allows attackers to import templates...
CVE-2022-27847
Cross-Site Request Forgery CSRF vulnerability in Yooslider Yoo Slider = 2.0.0 on WordPress allows attackers to import templates...
CVE-2022-27847 WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Template Import
Cross-Site Request Forgery CSRF vulnerability in Yooslider Yoo Slider = 2.0.0 on WordPress allows attackers to import templates...
CVE-2022-27847
Yooslider Yoo Slider for WordPress (versions
CVE-2022-27847 WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Template Import
Cross-Site Request Forgery CSRF vulnerability in Yooslider Yoo Slider = 2.0.0 on WordPress allows attackers to import templates...
Wordpress plugin Yooslider Yoo Slider 跨站请求伪造漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in Wordpress plugin Yooslider Yoo Slider 2.0.0 and earlier, which can be exploited by attackers ...
CVE-2022-27847
Cross-Site Request Forgery CSRF vulnerability in Yooslider Yoo Slider = 2.0.0 on WordPress allows attackers to import templates...
WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Template Import
Cross-Site Request Forgery CSRF vulnerability leading to Template Import discovered by Ex.Mi Patchstack in WordPress Yoo Slider plugin versions = 2.0.0. Solution Update the WordPress Yoo Slider plugin to the latest available version at least 2.1.0...
Cross-site Scripting (XSS)
cacti:sid is vulnerable to cross-site scripting XSS attacks. Template import for the midwinter theme allows remote attackers to trigger XSS...
Cacti < 1.2.18 XSS Vulnerability - Linux
Cacti is prone to a cross-site scripting XSS vulnerability via template import for the midwinter theme. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2020-14424
Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...
DEBIAN-CVE-2020-14424
Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...
Design/Logic Flaw
Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...
UBUNTU-CVE-2020-14424
Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...
CVE-2020-14424
Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...
CVE-2020-14424
Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...
Event Manager for WooCommerce < 3.5.3 - Unauthenticated Arbitrary Elementor Template Import
The mepimportajaxtemplate AJAX action of the plugin, available to both unauthenticated and authenticated users, is lacking any authorisation and CSRF checks. As a result, unauthenticated user can import arbitrary Elementor template to the blog Legit template:...
PT-2021-9727 · Cacti +4 · Cacti +4
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.18 Description: The issue allows remote attackers to trigger XSS via template import for the midwinter theme. There is no information provided about the estimated number of potentially affected devices worldwide or...
Cacti 跨站脚本漏洞
Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . Cacti suffers from a cross-site scripting vulnerability that exists...