224 matches found
CVE-2024-30508
CVE-2024-30508: Missing Authorization vulnerability in ThimPress WP Hotel Booking. Affects WP Hotel Booking
PT-2024-23435 · Thimpress · Thimpress Wp Hotel Booking
Name of the Vulnerable Software and Affected Versions: ThimPress WP Hotel Booking versions 2.0.9.2 and earlier Description: A Missing Authorization issue affects ThimPress WP Hotel Booking, allowing unauthorized access. Recommendations: For ThimPress WP Hotel Booking versions 2.0.9.2 and earlier,...
CVE-2023-40009
Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Pipes plugin = 1.4.0 versions...
CVE-2023-40009
Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Pipes plugin = 1.4.0 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Pipes plugin = 1.4.0 versions...
CVE-2023-40009
The CVE-2023-40009 entry concerns the WordPress WP Pipes plugin (
CVE-2023-30487
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ThimPress LearnPress Export Import plugin = 4.0.2 versions...
CVE-2023-30487
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ThimPress LearnPress Export Import plugin = 4.0.2 versions...
CVE-2023-30487
CVE-2023-30487 is an unauthenticated cross-site scripting (XSS) vulnerability in the LearnPress Export Import plugin for WordPress. Affected versions are
PT-2023-22724 · Thimpress · Thimpress Learnpress Export Import Plugin
Name of the Vulnerable Software and Affected Versions: ThimPress LearnPress Export Import plugin versions prior to 4.0.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...
CVE-2022-45355
Auth. admin+ SQL Injection SQLi vulnerability in ThimPress WP Pipes plugin = 1.33 versions...
CVE-2022-45355
Auth. admin+ SQL Injection SQLi vulnerability in ThimPress WP Pipes plugin = 1.33 versions...
Sql injection
Auth. admin+ SQL Injection SQLi vulnerability in ThimPress WP Pipes plugin = 1.33 versions...
CVE-2022-45355 WordPress WP Pipes Plugin <= 1.33 is vulnerable to SQL Injection (SQLi)
Auth. admin+ SQL Injection SQLi vulnerability in ThimPress WP Pipes plugin = 1.33 versions...
CVE-2022-45355 WordPress WP Pipes Plugin <= 1.33 is vulnerable to SQL Injection (SQLi)
Auth. admin+ SQL Injection SQLi vulnerability in ThimPress WP Pipes plugin = 1.33 versions...
CVE-2022-45355
CVE-2022-45355 : Authenticated admin+ SQL Injection in the ThimPress WP Pipes plugin prior to 1.34 (affected versions ≤1.33). Root cause: improper sanitization/escaping of SQL input from the plugin, enabling injection with admin privileges. Impact per sources includes data access/modification via...
PT-2023-14646 · Thimpress · Thimpress Wp Pipes
Name of the Vulnerable Software and Affected Versions: ThimPress WP Pipes plugin versions prior to 1.34 Description: The issue is related to an SQL Injection vulnerability in the ThimPress WP Pipes plugin, which can be exploited by authenticated administrators. This vulnerability allows for the...
CVE-2021-36852
Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Hotel Booking plugin = 1.10.5 at WordPress...