5218 matches found
PT-2019-15020
Name of the Vulnerable Software and Affected Versions ultimate-faqs plugin versions prior to 1.8.25 Description The issue allows unauthenticated options import. This is related to the Functions/EWD UFAQ Import.php file in the ultimate-faqs plugin for WordPress. Recommendations For versions prior ...
CVE-2019-17232
Functions/EWDUFAQImport.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options import. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2016-11000
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
Sql injection
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
CVE-2016-11000
CVE-2016-11000 affects the WordPress plugin wp-ultimate-exporter (versions up to 1.1). The vulnerability is an SQL injection in the export_type_name parameter, with CVSS vectors indicating high/moderate impact (CVSS v3.1: CRITICAL, 9.8; CVSS v2.0: HIGH, 7.5). The reports confirm the vulnerable co...
CVE-2016-11000
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
CVE-2016-11000: Improper Neutralization of Special Elements used in an SQL Command
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
Ultimate FAQ < 1.8.25 - Unauthenticated Options Import/Export
The Ultimate FAQ – WordPress Q Plugin WordPress plugin was affected by an Unauthenticated Options Import/Export security vulnerability...
PT-2019-7793
Name of the Vulnerable Software and Affected Versions wp-ultimate-exporter plugin versions prior to 1.2 Description The issue allows for SQL injection via the export type name parameter. Recommendations For wp-ultimate-exporter plugin versions prior to 1.2, update to version 1.2 or later to resol...
WordPress Ultimate FAQ Plugin < 1.8.22 XSS Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
WordPress WP Ultimate Recipe Plugin < 3.12.7 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113501";...
WordPress wp-ultimate-recipe plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-recipe is a plugin for inserting recipes into web pages. A cross-site scripting vulnerability exists in WordPress...
Cross site scripting
The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS...
CVE-2019-15836
CVE-2019-15836 affects the WordPress plugin wp-ultimate-recipe, with stored XSS in versions before 3.12.7. The vulnerability is introduced in the plugin code and leads to client‑side code execution when exploited. Remediation per available sources is to upgrade to version 3.12.7 or later. Exploit...
CVE-2019-15836: Improper Neutralization of Input During Web Page Generation
The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS...
PT-2019-14425
Name of the Vulnerable Software and Affected Versions wp-ultimate-recipe plugin versions prior to 3.12.7 Description The issue is related to stored XSS in the wp-ultimate-recipe plugin for WordPress. Recommendations For versions prior to 3.12.7, update to version 3.12.7 or later to resolve the...
WordPress shortcodes-ultimate plugin input validation error vulnerability
WordPress is a blogging platform from the WordPress Foundation developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. shortcodes-ultimate is one of the plugins used in it, which supports the creation of tabs, buttons, sliders,...
WordPress ultimate-faqs plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ultimate-faqs is a FAQ plugin used in it. A cross-site scripting vulnerability exists in the WordPress ultimate-faqs plugin. An attack...
