WordPress Ultimate Post Kit – Addons For Elementor Plugin <= 3.11.7 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Post Kit – Addons For Elementor Type Plugin Vulnerable versions = 3.11.7 Fixed in 3.11.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5662 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID eaf9b9b3c2a5 Credi...

PT-2024-36928

Name of the Vulnerable Software and Affected Versions The Ultimate Post Kit Addons For Elementor plugin for WordPress versions up to and including 3.11.7 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in the url parameter...

CVE-2024-5662: Improper Neutralization of Input During Web Page Generation

The Ultimate Post Kit Addons For Elementor – Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the Social Count Static widget in all versions up to, and...

WordPress plugin Ultimate Post Kit Addons For Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Malicious code in Ultimate.Wpf.Toolkit (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2138 Malicious code in down_load_ebook_aws_amazon_web_service_the_ultimate_guide_to_amaz_by_george_prestonship_u1mt7 (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-10412

Name of the Vulnerable Software and Affected Versions wpWax Post Grid, Slider & Carousel Ultimate versions 1.6.10 and earlier Description The issue affects the wpWax Post Grid, Slider & Carousel Ultimate plugin for WordPress, allowing PHP Local File Inclusion due to improper control of filename f...

CVE-2023-6692: Improper Neutralization of Input During Web Page Generation

The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tab anchor metabox in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

WordPress plugin Ultimate Blocks security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-15051

Name of the Vulnerable Software and Affected Versions The Ultimate Blocks – WordPress Blocks Plugin versions up to, and including, 3.0.8 Description The issue is related to Stored Cross-Site Scripting via the plugin's tab anchor metabox due to insufficient input sanitization and output escaping o...

WordPress Ultimate Blocks – WordPress Blocks Plugin plugin <= 3.0.8 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Rafshanzani Suhada in WordPress Plugin Ultimate Blocks versions = 3.1.0...

WordPress Ultimate Blocks – Gutenberg Blocks Plugin Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Blocks – Gutenberg Blocks Plugin Type Plugin Vulnerable versions = 3.1.0 Fixed in 3.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6692 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0c6c4059359d Credit...

CVE-2024-1094: Missing Authorization

The Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the makestaff function in all versions up to, and including, 1.0.21. This makes it...

CVE-2024-4821

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sulightbox shortcode in all versions up to, and including, 7.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

WordPress Shortcodes Ultimate plugin <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via sulightbox Shortcode vulnerability discovered by Richard Telleng stueotue in WordPress Plugin Shortcodes Ultimate versions = 7.1.6...

CVE-2024-4821: Improper Neutralization of Input During Web Page Generation

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sulightbox shortcode in all versions up to, and including, 7.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

WordPress Shortcodes Ultimate Plugin <= 7.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Shortcodes Ultimate Type Plugin Vulnerable versions = 7.1.6 Fixed in 7.1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4821 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7c78a726473d Credits Richard Telleng...

PT-2024-33026

Name of the Vulnerable Software and Affected Versions WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress versions up to, and including, 7.1.6 Description The issue is related to Stored Cross-Site Scripting via the plugin's su lightbox shortcode due to insufficient input sanitization...

CVE-2023-49822

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10...

CVE-2023-49822 WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10...