WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WP Timeline – Vertical and Horizontal timeline plugin versions = 3.6.7...

WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WP Timeline – Vertical and Horizontal timeline plugin versions = 3.6.7...

WordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WP Timeline – Vertical and Horizontal timeline plugin versions = 3.6.7...

WordPress WP Timeline – Vertical and Horizontal timeline plugin Plugin <= 3.6.7 is vulnerable to Cross Site Scripting (XSS)

Software WP Timeline – Vertical and Horizontal timeline plugin Type Plugin Vulnerable versions = 3.6.7 Fixed in 3.6.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47322 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9c33a0ca739f...

WordPress WP Timeline – Vertical and Horizontal timeline plugin Plugin <= 3.6.7 is vulnerable to Local File Inclusion

Software WP Timeline – Vertical and Horizontal timeline plugin Type Plugin Vulnerable versions = 3.6.7 Fixed in 3.6.8 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-47323 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 6eddb8cb706e Credits...

WordPress WP Timeline – Vertical and Horizontal timeline plugin Plugin <= 3.6.7 is vulnerable to Local File Inclusion

Software WP Timeline – Vertical and Horizontal timeline plugin Type Plugin Vulnerable versions = 3.6.7 Fixed in 3.6.8 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-47324 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 343fadf4e3fb Credits Bond...

CVE-2024-8752

creationtimestamp| type| source ---|---|--- 2024-09-16 18:42:14+00:00| seen| https://t.me/cvedetector/5730 2024-09-17 16:52:37+00:00| published-proof-of-concept| https://t.me/realLulzSec/18736 2024-09-17 16:52:37+00:00| seen| https://t.me/realLulzSec/2004 2024-09-17 23:21:14+00:00|...

CVE-2024-46693 soc: qcom: pmic_glink: Fix race during initialization

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglink: Fix race during initialization As pointed out by Stephen Boyd it is possible that during initialization of the pmicglink child drivers, the protection-domain notifiers fires, and the associated work is...

CVE-2024-41498

creationtimestamp| type| source ---|---|--- 2024-09-08 15:15:13+00:00| published-proof-of-concept| https://t.me/HackerArsenal/296 2024-09-08 17:32:54+00:00| seen| https://t.me/CyberSecurityTechnologies/11100 2024-09-09 09:56:25+00:00| seen| https://t.me/Rootsec2/4371 2025-07-13 02:30:20+00:00|...

CVE-2024-20439

creationtimestamp| type| source ---|---|--- 2024-09-04 20:15:49+00:00| seen| https://t.me/cvedetector/4823 2024-09-05 06:52:28+00:00| seen| https://t.me/thehackernews/5522 2024-09-05 07:07:50+00:00| seen| https://t.me/CyberBulletin/551 2024-09-05 07:50:52+00:00| seen|...

CVE-2024-8274

The WP Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters from 'timelineobj' in all versions up to, and including, 10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

PT-2024-38905 · WordPress · Wp Booking Calendar

Name of the Vulnerable Software and Affected Versions: WP Booking Calendar plugin for WordPress versions up to, and including, 10.5 Description: The issue is related to Reflected Cross-Site Scripting via several parameters from timeline obj due to insufficient input sanitization and output...

apex.sia.org.sg Cross Site Scripting vulnerability OBB-3960334

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-5502

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-5502

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-5502

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...

xacdo.net Open Redirect vulnerability OBB-3960323

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

devxpress.ca Cross Site Scripting vulnerability OBB-3960317

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

coe.edu Cross Site Scripting vulnerability OBB-3960308

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sjctni.edu Cross Site Scripting vulnerability OBB-3960307

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...