Lucene search
+L

3921 matches found

CNNVD
CNNVD
added 2024/08/19 12:00 a.m.8 views

WordPress plugin Ultimate Membership Pro 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

10CVSS7.2AI score0.00536EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/19 12:00 a.m.8 views

WordPress plugin Ultimate Membership Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

9.8CVSS6.9AI score0.00549EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/18 10:15 p.m.20 views

CVE-2024-43241

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

7.1CVSS0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/18 9:27 p.m.29 views

CVE-2024-43241 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

7.1CVSS0.00271EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/18 9:27 p.m.44 views

CVE-2024-43241

Technical details about CVE-2024-43241 (Ultimate Membership Pro reflected XSS) are not provided in the connected documents. Please monitor official advisories for affected versions, fixes, and exploit status; no remediation specifics are available here.

7.1CVSS5.9AI score0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/18 9:27 p.m.16 views

CVE-2024-43241 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

7.1CVSS5.2AI score0.00271EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/18 2:15 p.m.7 views

CVE-2024-43342

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/18 2:15 p.m.37 views

CVE-2024-43342

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/18 1:22 p.m.19 views

CVE-2024-43342 WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS6.8AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/18 1:22 p.m.38 views

CVE-2024-43342 WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/18 1:22 p.m.73 views

CVE-2024-43342

CVE-2024-43342 is a Stored XSS vulnerability in BdThemes Ultimate Store Kit Elementor Addons (affecting up to 1.6.4). The flaw stems from improper input neutralization during web page generation, enabling an attacker with network access to inject scripts that may affect user confidentiality and i...

6.5CVSS6.5AI score0.00254EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/18 12:00 a.m.4 views

WordPress plugin Ultimate Membership Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.1AI score0.00271EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/18 12:00 a.m.14 views

WordPress plugin Ultimate Store Kit Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.5CVSS5.9AI score0.00254EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/08/18 12:00 a.m.17 views

PT-2024-30509 · Elementor · Ultimate Store Kit Elementor Addons

Name of the Vulnerable Software and Affected Versions: Ultimate Store Kit Elementor Addons versions 1.6.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that ...

6.5CVSS6.3AI score0.00254EPSS
SaveExploits0References9
Patchstack
Patchstack
added 2024/08/16 12:00 a.m.26 views

WordPress Ultimate Store Kit Elementor Addons Plugin <= 1.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Store Kit Elementor Addons Type Plugin Vulnerable versions = 1.6.4 Fixed in 2.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43342 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bae240e72e97 Credits 4rCanJ0x! Required...

6.5CVSS6.6AI score0.00254EPSS
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
added 2024/08/14 12:00 a.m.372 views

K7 Ultimate Security NULL Pointer Dereference

Title: K7 Ultimate Security v17.0.2019 "K7RKScan.sys" Null Pointer Dereference Date: 13.08.2024 Author: M. Akil Gündoğan Vendor Homepage: https://k7computing.com/ Version: v17.0.2019 Tested on: Windows 10 Pro x64 CVE ID: CVE-2024-36424 Vulnerability Description:...

5.5CVSS7.1AI score0.00991EPSS
SaveExploits2
OSV
OSV
added 2024/08/13 12:15 p.m.9 views

CVE-2024-43140

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows PHP Local File Inclusion.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.4...

8.8CVSS5.8AI score0.00582EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/08/13 12:00 a.m.14 views

WordPress plugin Ultimate Bootstrap Elements for Elementor 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

8.8CVSS6.8AI score0.00582EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/12 10:15 p.m.10 views

CVE-2024-43151

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite allows Stored XSS.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.9...

5.4CVSS5.8AI score0.0026EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/08/12 10:15 p.m.6 views

CVE-2024-43151

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite allows Stored XSS.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.9...

6.5CVSS5.2AI score0.0026EPSS
SaveExploits0References2
Rows per page
Query Builder