266174 matches found
CVE-2024-47323
CVE-2024-47323 affects WordPress WP Timeline – Vertical and Horizontal timeline plugin versions
WordPress plugin WP Timeline 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress plugin WP Timeline 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
CVE-2024-46256
creationtimestamp| type| source ---|---|--- 2024-09-27 20:55:20+00:00| seen| https://t.me/cvedetector/6570...
WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WP Timeline – Vertical and Horizontal timeline plugin versions = 3.6.7...
WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WP Timeline – Vertical and Horizontal timeline plugin versions = 3.6.7...
WordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WP Timeline – Vertical and Horizontal timeline plugin versions = 3.6.7...
WordPress WP Timeline – Vertical and Horizontal timeline plugin Plugin <= 3.6.7 is vulnerable to Local File Inclusion
Software WP Timeline – Vertical and Horizontal timeline plugin Type Plugin Vulnerable versions = 3.6.7 Fixed in 3.6.8 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-47324 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 343fadf4e3fb Credits Bond...
WordPress WP Timeline – Vertical and Horizontal timeline plugin Plugin <= 3.6.7 is vulnerable to Local File Inclusion
Software WP Timeline – Vertical and Horizontal timeline plugin Type Plugin Vulnerable versions = 3.6.7 Fixed in 3.6.8 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-47323 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 6eddb8cb706e Credits...
WordPress WP Timeline – Vertical and Horizontal timeline plugin Plugin <= 3.6.7 is vulnerable to Cross Site Scripting (XSS)
Software WP Timeline – Vertical and Horizontal timeline plugin Type Plugin Vulnerable versions = 3.6.7 Fixed in 3.6.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47322 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9c33a0ca739f...
CVE-2024-8752
creationtimestamp| type| source ---|---|--- 2024-09-16 18:42:14+00:00| seen| https://t.me/cvedetector/5730 2024-09-17 16:52:37+00:00| published-proof-of-concept| https://t.me/realLulzSec/18736 2024-09-17 16:52:37+00:00| seen| https://t.me/realLulzSec/2004 2024-09-17 23:21:14+00:00|...
CVE-2024-46693 soc: qcom: pmic_glink: Fix race during initialization
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglink: Fix race during initialization As pointed out by Stephen Boyd it is possible that during initialization of the pmicglink child drivers, the protection-domain notifiers fires, and the associated work is...
CVE-2024-41498
creationtimestamp| type| source ---|---|--- 2024-09-08 15:15:13+00:00| published-proof-of-concept| https://t.me/HackerArsenal/296 2024-09-08 17:32:54+00:00| seen| https://t.me/CyberSecurityTechnologies/11100 2024-09-09 09:56:25+00:00| seen| https://t.me/Rootsec2/4371 2025-07-13 02:30:20+00:00|...
CVE-2024-20439
creationtimestamp| type| source ---|---|--- 2024-09-04 20:15:49+00:00| seen| https://t.me/cvedetector/4823 2024-09-05 06:52:28+00:00| seen| https://t.me/thehackernews/5522 2024-09-05 07:07:50+00:00| seen| https://t.me/CyberBulletin/551 2024-09-05 07:50:52+00:00| seen|...
CVE-2024-8274
The WP Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters from 'timelineobj' in all versions up to, and including, 10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
PT-2024-38905 · WordPress · Wp Booking Calendar
Name of the Vulnerable Software and Affected Versions: WP Booking Calendar plugin for WordPress versions up to, and including, 10.5 Description: The issue is related to Reflected Cross-Site Scripting via several parameters from timeline obj due to insufficient input sanitization and output...
apex.sia.org.sg Cross Site Scripting vulnerability OBB-3960334
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-5502
The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...
CVE-2024-5502
The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...
CVE-2024-5502
The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...