Lucene search
+L

5235 matches found

Cvelist
Cvelist
•added 2024/08/19 5:07 p.m.•56 views

CVE-2024-43240 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability

Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

9.4CVSS0.00549EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/19 12:00 a.m.•3 views

CVE-2024-43242: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

10CVSS8.4AI score0.00536EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/19 12:00 a.m.•18 views

WordPress plugin Ultimate Membership Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

9.8CVSS6.9AI score0.00549EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/19 12:00 a.m.•2 views

CVE-2024-43240: Improper Authentication

Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

9.8CVSS8.4AI score0.00549EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/19 12:00 a.m.•13 views

WordPress plugin Ultimate Membership Pro 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

10CVSS7.2AI score0.00536EPSS
SaveExploits0References2
NVD
NVD
•added 2024/08/18 10:15 p.m.•28 views

CVE-2024-43241

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

7.1CVSS0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/18 9:27 p.m.•17 views

CVE-2024-43241 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

7.1CVSS5.2AI score0.00271EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/18 9:27 p.m.•58 views

CVE-2024-43241

Technical details about CVE-2024-43241 (Ultimate Membership Pro reflected XSS) are not provided in the connected documents. Please monitor official advisories for affected versions, fixes, and exploit status; no remediation specifics are available here.

7.1CVSS5.9AI score0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/18 9:27 p.m.•40 views

CVE-2024-43241 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

7.1CVSS0.00271EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/18 2:15 p.m.•47 views

CVE-2024-43342

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS0.00254EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/08/18 2:15 p.m.•17 views

CVE-2024-43342

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/18 1:22 p.m.•85 views

CVE-2024-43342

CVE-2024-43342 is a Stored XSS vulnerability in BdThemes Ultimate Store Kit Elementor Addons (affecting up to 1.6.4). The flaw stems from improper input neutralization during web page generation, enabling an attacker with network access to inject scripts that may affect user confidentiality and i...

6.5CVSS6.5AI score0.00254EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/08/18 1:22 p.m.•47 views

CVE-2024-43342 WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/18 1:22 p.m.•24 views

CVE-2024-43342 WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS6.8AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/18 12:00 a.m.•8 views

PT-2024-30404

Name of the Vulnerable Software and Affected Versions Ultimate Membership Pro versions n/a through 12.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations For...

7.1CVSS5.8AI score0.00271EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/18 12:00 a.m.•8 views

CVE-2024-43241: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

7.1CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/18 12:00 a.m.•26 views

PT-2024-30509 · Elementor · Ultimate Store Kit Elementor Addons

Name of the Vulnerable Software and Affected Versions: Ultimate Store Kit Elementor Addons versions 1.6.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that ...

6.5CVSS6.3AI score0.00254EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/18 12:00 a.m.•7 views

CVE-2024-43342: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/18 12:00 a.m.•22 views

WordPress plugin Ultimate Store Kit Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.5CVSS5.9AI score0.00254EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/08/18 12:00 a.m.•13 views

WordPress plugin Ultimate Membership Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.1AI score0.00271EPSS
SaveExploits0References2
Rows per page
Query Builder