3921 matches found
CVE-2024-51797
CVE-2024-51797 describes a DOM-based XSS in the WordPress plugin Ultimate Accordion by Md. Shiddikur Rahman. The vulnerability is an improper input neutralization during web page generation, allowing cross-site scripting. Affected products/versions: Ultimate Accordion
CVE-2024-51870
CVE-2024-51870 corresponds to a stored cross‑site scripting (XSS) vulnerability in the WordPress plugin “Ultimate Flipbox Addon for Elementor.” Affected: Ultimate Flipbox Addon for Elementor versions up to 1.0.4 (auth required). Root cause: improper neutralization of user input during web page ge...
WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Plugin Ultimate Classified Listings versions = 1.7...
PT-2024-34924 · Unknown · Ultimate Accordion
Name of the Vulnerable Software and Affected Versions: Ultimate Accordion versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means an attacker could potentially inject malicious scripts in...
WordPress Ultimate Classified Listings Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)
Software Ultimate Classified Listings Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52487 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID a096bde3e29d Credits Fariq Fadillah Gusti...
WordPress plugin Ultimate Flipbox Addon for Elementor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...
WordPress plugin Ultimate Accordion 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2024-35000 · Elementor · Ultimate Flipbox Addon For Elementor
Name of the Vulnerable Software and Affected Versions: Ultimate Flipbox Addon for Elementor versions 1.0.3 and earlier Description: The issue affects the Ultimate Flipbox Addon for Elementor, allowing Stored XSS due to improper neutralization of input during web page generation. This is a critica...
WordPress Ultimate Classified Listings Plugin <= 1.4 is vulnerable to Local File Inclusion
Software Ultimate Classified Listings Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-52448 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID fc3aafba1ff7 Credits theviper17 Required privilege...
WordPress WordPress Video Robot - The Ultimate Video Importer Plugin <= 1.20.0 is vulnerable to SQL Injection
Software WordPress Video Robot - The Ultimate Video Importer Type Plugin Vulnerable versions = 1.20.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-52431 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 535a5d7fd7c2 Credits Bonds Requir...
WordPress WordPress Video Robot - The Ultimate Video Importer Plugin <= 1.20.0 is vulnerable to Privilege Escalation
Software WordPress Video Robot - The Ultimate Video Importer Type Plugin Vulnerable versions = 1.20.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-9192 Patch priority High CVSS severity High 8.8 Developer Claim ownership...
WordPress Ultimate Accordion plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Ultimate Accordion versions = 1.0...
WordPress Ultimate Accordion Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Ultimate Accordion Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51797 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b1fe37ef7d14 Credits SOPROBRO Required privilege Contributor...
WordPress Ultimate Flipbox Addon for Elementor Plugin 1.0.4 is vulnerable to Cross Site Scripting (XSS)
Software Ultimate Flipbox Addon for Elementor Type Plugin Vulnerable versions 1.0.4 Fixed in 1.0.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51870 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5ab85e1c19c0 Credits Gab Required...
CVE-2024-10329
The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the 'ubegetpagetemplates' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
CVE-2024-10329 Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure
The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the 'ubegetpagetemplates' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure vulnerability
Authenticated Contributor+ Sensitive Information Exposure vulnerability discovered by Ankit Patel in WordPress Plugin Ultimate Bootstrap Elements for Elementor versions = 1.4.6...
WordPress plugin Ultimate Bootstrap Elements for Elementor 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...
WordPress Shortcodes Blocks Creator Ultimate Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)
Software Shortcodes Blocks Creator Ultimate Type Plugin Vulnerable versions = 2.1.3 Fixed in 2.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10340 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e3eb71af58b7 Credits Istv...
