769 matches found
PT-2024-36667 · Wovax · Wovax Idx
Name of the Vulnerable Software and Affected Versions: Wovax IDX versions 1.2.2 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, which allows unauthorized access. This problem affects Wovax IDX, enabling authentication bypass...
WordPress plugin Quietly Insights 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
WordPress Wovax IDX plugin <= 1.2.2 - Account Takeover vulnerability
Account Takeover vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Wovax IDX versions = 1.2.2...
WordPress plugin Woocommerce Support System 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2023-30476
Missing Authorization vulnerability in sparklewpthemes Blogger Buzz blogger-buzz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blogger Buzz: from n/a through = 1.2.2...
CVE-2023-23715
Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoardWP – Job Board Listings and Submissions: from n/a through 1.2.2...
CVE-2023-23715
CVE-2023-23715 affects WordPress plugin JobBoardWP – Job Board Listings and Submissions (versions
WordPress plugin JobBoardWP 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress plugin Blogger Buzz 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-11993 · Unknown · Jobboardwp
Name of the Vulnerable Software and Affected Versions: JobBoardWP – Job Board Listings and Submissions versions 1.2.2 and earlier Description: The issue is related to a missing authorization vulnerability in JobBoardWP, which allows the exploitation of incorrectly configured access control securi...
PT-2024-36141 · Unknown · Blazethemes News Kit Elementor Addons
Name of the Vulnerable Software and Affected Versions: BlazeThemes News Kit Elementor Addons versions 1.2.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker c...
WordPress TAX SERVICE Electronic HDM plugin <= 1.2.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by stealthcopter in WordPress Plugin TAX SERVICE Electronic HDM versions = 1.2.2...
CVE-2024-53765
CVE-2024-53765 is a CSRF-to-Stored XSS vulnerability affecting the WordPress plugin Mins To Read (versions up to 1.2.2). The provided documents confirm the issue but do not specify exploitation details or a confirmed fixed version; the Patchstack/CVE entries indicate older versions are affected, ...
PT-2024-35876 · Unknown · Mins To Read
Name of the Vulnerable Software and Affected Versions: Mins To Read versions 1.2.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF problem that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...
WordPress plugin Mins To Read 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
PT-2024-16541 · WordPress · The Theme Builder For Elementor
Name of the Vulnerable Software and Affected Versions: The Theme Builder For Elementor plugin for WordPress versions up to, and including, 1.2.2 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or draft posts created by...
WordPress plugin Theme Builder For Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-3379 Incorrect Authorization in lunary-ai/lunary
In lunary-ai/lunary versions 1.2.2 through 1.2.6, an incorrect authorization vulnerability allows unprivileged users to re-generate the private key for projects they do not have access to. Specifically, a user with a 'Member' role can issue a request to regenerate the private key of a project...
PT-2024-33493 · Umbrel · Umbrel
Name of the Vulnerable Software and Affected Versions: Umbrel versions prior to 1.2.2 Description: The login functionality of Umbrel contains a reflected cross-site scripting XSS vulnerability in use-auth.tsx. An attacker can specify a malicious redirect query parameter to trigger the...
PT-2024-27434 · Unknown · Masterstudy Elementor Widgets
Name of the Vulnerable Software and Affected Versions: Masterstudy Elementor Widgets versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Masterstu...