Lucene search
K

7 matches found

OSV
OSV
added 2024/08/29 11:15 a.m.2 views

CVE-2024-7606

The Front End Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'user-search' shortcode in all versions up to, and including, 3.2.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6AI score0.00278EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/08/29 1:4 a.m.2 views

WordPress Front End Users plugin <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection vulnerability

Authenticated Contributor+ Time-Based SQL Injection vulnerability discovered by Peter Thaleikis in WordPress Plugin Front End Users versions = 3.2.28...

8.8CVSS8.1AI score0.00767EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/29 12:0 a.m.1 views

WordPress plugin Front End Users SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.8CVSS7.7AI score0.00767EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/08/29 12:0 a.m.2 views

WordPress plugin Front End Users 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.9AI score0.00278EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/08/28 12:0 a.m.2 views

PT-2024-38448 · WordPress · Front End Users

Name of the Vulnerable Software and Affected Versions: Front End Users plugin for WordPress versions up to, and including, 3.2.28 Description: The issue is a time-based SQL Injection vulnerability via the order parameter. This vulnerability is due to insufficient escaping on the user-supplied...

8.8CVSS7.4AI score0.00767EPSS
Exploits0References14
Positive Technologies
Positive Technologies
added 2024/08/28 12:0 a.m.2 views

PT-2024-38447 · WordPress · Front End Users

Name of the Vulnerable Software and Affected Versions: Front End Users plugin for WordPress versions up to, and including, 3.2.28 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'user-search' shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS6AI score0.00278EPSS
Exploits0References10
CNNVD
CNNVD
added 2023/07/13 12:0 a.m.2 views

Zemana Anti Malware 安全漏洞

Zemana Anti Malware is an anti-malware program from Zemana. A security vulnerability exists in Zemana Anti Malware version 4.1.422, Zemana AntiMalware version 3.2.28, which stems from vulnerability to arbitrary code injection...

6.7CVSS6.9AI score0.00836EPSS
Exploits1References2
Rows per page
Query Builder