WordPress Blog Summary plugin <= 0.1.2 β - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Blog Summary versions = 0.1.2 β...

WordPress Woo Tuner plugin <= 0.1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Woo Tuner versions = 0.1.2...

PT-2025-5072 · Woo Tuner · Woo Tuner

Name of the Vulnerable Software and Affected Versions: Woo Tuner versions 0.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Woo Tuner versions 0.1.2 and...

WordPress linkID 0.1.2 Missing Authorization / Information Disclosure Vulnerability

CVE-2024-12542 linkID = 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure Description The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and...

WordPress linkID plugin <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Francesco Carlucci in WordPress Plugin linkID versions = 0.1.2...

WordPress Content No Cache plugin <= 0.1.2 - Unauthenticated Private Content Disclosure vulnerability

Unauthenticated Private Content Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Content No Cache versions = 0.1.2...

WordPress plugin Content No Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Malicious code in artifact-lab-3-package-736f752d (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfb249857a1fcf0c79636d8692dc8b148d847336022dbe6f4ab558f6f5c2f97f Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

PT-2024-28323 · Unknown · 2O3T-Utility

Name of the Vulnerable Software and Affected Versions: 2o3t-utility version 0.1.2 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties using the extend function, which is affected by prototype pollution...

2o3t-Utility Security Vulnerabilities

2o3t-Utility is a simple Node.js basic tool library open-sourced by 2o3t. A security vulnerability exists in version v0.1.2 of 2o3t-Utility, which stems from inclusion of prototype contamination via the function extend, allowing an attacker to execute arbitrary code or cause a denial of service D...

lagom 安全漏洞

lagom is a PyTorch infrastructure for rapid prototyping of reinforcement learning algorithms from the Xingdong Zuo personal developer. A security vulnerability exists in lagom version v.0.1.2, which stems from a vulnerability that allows a local attacker to execute arbitrary code via the picklelo...

Malicious code in eslint-config-web3-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e23c591b583354dc45114b2ff42008dd281f6a57772a8f5f59a249ab89f2fd84 The OpenSSF Package Analysis project identified 'eslint-config-web3-base' @ 0.1.2 npm as malicious. It is considered malicious because: - The...

WordPress Plugin Tiempo.com 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2023-18652 · WordPress · Tiempo.Com Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Tiempo.com WordPress plugin versions 0.1.2 and earlier Description: The issue is related to the lack of a CSRF check when deleting a shortcode in the Tiempo.com WordPress plugin. This could allow attackers to make logged-in admins delete...

WordPress Plugin Tiempo.com 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

mm-wiki 跨站脚本漏洞

mm-wiki is a Chinese phachon individual developers of a lightweight enterprise knowledge sharing and team collaboration software. It can be used to quickly build enterprise Wiki and team knowledge sharing platform. A security vulnerability exists in Phachon mm-wiki version v.0.1.2. An attacker ca...

PT-2023-11518 · Phachon · Mm-Wiki

Name of the Vulnerable Software and Affected Versions: Phachon mm-wiki version 0.1.2 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the system/user/save parameter. Recommendations: For Phachon mm-wiki version 0.1.2, consider restricting acce...

CVE-2023-25015

Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF...

CVE-2022-24988

In galois2p8 before 0.1.2, PrimitivePolynomialField::new has an off-by-one buffer overflow for a vector...

PT-2022-17034 · Unknown · Galois 2P8

Name of the Vulnerable Software and Affected Versions: galois 2p8 versions prior to 0.1.2 Description: The issue is related to an off-by-one buffer overflow in the PrimitivePolynomialField::new function for a vector. Recommendations: For versions prior to 0.1.2, update to version 0.1.2 or later t...