WordPress plugin Review & testimonial widgets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

WordPress plugin Instant Chat Floating Button for WordPress Websites 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in...

WordPress plugin WP Ticket Ultra Help Desk 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exists ...

Minecraft MOTD Parser 安全漏洞

Minecraft MOTD Parser is a PHP library for parsing Minecraft servers by an individual developer jgniecki. A security vulnerability exists in Minecraft MOTD Parser 1.0.5 and earlier versions, which stems from a vulnerability in the HtmlGenerator class that is susceptible to cross-site scripting XS...

WordPress plugin WPZOOM Shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by tahu.datar Patchstack Alliance in WordPress Plugin Instant Chat Floating Button for WordPress Websites versions = 1.0.5...

WordPress Blogvi theme <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Blogvi versions = 1.0.5...

WordPress Blogvi Theme <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Blogvi Type Theme Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35715 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 148848988fb4 Credits stealthcopter Required privilege Contributor...

PT-2024-30099 · Unknown · Slabiak Appointment Scheduler

Name of the Vulnerable Software and Affected Versions: slabiak Appointment Scheduler version 1.0.5 Description: A Host Header Poisoning Open Redirect issue allows a remote attacker to redirect users to a malicious website, leading to potential credential theft, malware distribution, or other...

WordPress plugin IntoTheDark 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Theme Hello Agency versions = 1.0.5...

Malicious code in kekepaketti-og (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eac8149c474ae01b84715381230e4ebbcf10338e0342de5e55747c8453d80237 The OpenSSF Package Analysis project identified 'kekepaketti-og' @ 1.0.5 npm as malicious. It is considered malicious because: - The package...

WordPress Ideaplus plugin <= 1.0.5 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin Ideaplus versions = 1.0.5...

WordPress Alfred Easy Shipping plugin <= 1.0.5 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin Alfred Easy Shipping versions = 1.0.5...

WordPress Contact Form 7 Multi-Step Addon Plugin <= 1.0.5 is vulnerable to Backdoor

Software Contact Form 7 Multi-Step Addon Type Plugin Vulnerable versions = 1.0.5 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8aae8a0dc1cb Credits Sansec.io Required privilege Unauthenticated...

CVE-2024-37888

The Open Link is a CKEditor plugin, extending context menu with a possibility to open link in a new tab. The vulnerability allowed to execute JavaScript code by abusing link href attribute. It affects all users using the Open Link plugin at version 1.0.5...

CVE-2024-37888

The CVE-2024-37888 issue affects the Open Link CKEditor plugin, impacting users of versions prior to 1.0.5. The vulnerability is a cross-site scripting (XSS) flaw that enables JavaScript execution via abuse of the link href attribute in the plugin’s open link functionality. Remediation per source...

CVE-2024-37888 The Open Link CKEditor plugin has a cross-site scripting (XSS) vulnerability in open link functionality

The Open Link is a CKEditor plugin, extending context menu with a possibility to open link in a new tab. The vulnerability allowed to execute JavaScript code by abusing link href attribute. It affects all users using the Open Link plugin at version 1.0.5...

WordPress plugin ActivityPub security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-26665 · Peregrinethemes · Bloglo +1

Name of the Vulnerable Software and Affected Versions: peregrinethemes Bloglo versions 1.1.3 and earlier peregrinethemes Blogvi versions 1.0.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This...