WordPress plugin APK Downloade 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

WordPress plugin Boombox Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34923 · WordPress · Trendy Restaurant Menu

Name of the Vulnerable Software and Affected Versions: Trendy Restaurant Menu versions 1.0.0 and earlier Description: The issue affects the Trendy Restaurant Menu plugin for WordPress, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to...

PT-2024-35039 · Codemenschen · Codemenschen Wp Virtual Room Configurator

Name of the Vulnerable Software and Affected Versions: codemenschen WP Virtual Room Configurator versions 1.0.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Stored XSS, which can be...

WordPress plugin Simple Social Share Block 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin Simple...

WordPress plugin Simple Pricing Table 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2024-34990 · Unknown · Duogeek Custom Dashboard Widget

Name of the Vulnerable Software and Affected Versions: DuoGeek Custom Dashboard Widget versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker could inject...

WordPress plugin Easy Social Sharebar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

Malicious code in take3-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3ab74f2bd476e91c4d2e0d1cd29fa80dfb82df59eb0d48c4fd32e6fec28ef39 The OpenSSF Package Analysis project identified 'take3-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2024-35246 · Unknown · Basepress Migration Tools

Name of the Vulnerable Software and Affected Versions: BasePress Migration Tools versions 1.0.0 and earlier Description: The issue allows an attacker to upload a web shell to a web server by exploiting an Unrestricted Upload of File with Dangerous Type vulnerability in the BasePress Migration...

MAL-2024-10711 Malicious code in cb-cookie-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e21db163fcf5bd372c2a214576f2018fdca3221ae4ca1a4ed936a02d013c782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52380

Unrestricted Upload of File with Dangerous Type vulnerability in softpulseinfotech Picsmize picsmize allows Upload a Web Shell to a Web Server.This issue affects Picsmize: from n/a through = 1.0.0...

WordPress plugin Matix Popup Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-35218 · Picsmize · Picsmize

Name of the Vulnerable Software and Affected Versions: Picsmize versions 1.0.0 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can lead to remote code execution. Recommendations: For...

PT-2024-35220 · Medma Technologies · Matix Popup Builder

Name of the Vulnerable Software and Affected Versions: Matix Popup Builder versions 1.0.0 and earlier Description: A Missing Authorization issue in Medma Technologies Matix Popup Builder allows Privilege Escalation. This can lead to unauthorized access and elevation of privileges. Recommendations...

WordPress plugin Picsmize 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

WordPress BasePress Migration Tools plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin BasePress Migration Tools versions = 1.0.0...

CVE-2024-51837

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SONS Creative Development WP Contest allows SQL Injection.This issue affects WP Contest: from n/a through 1.0.0...

WordPress plugin WP Contest SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP...

WordPress Picsmize Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload

Software Picsmize Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52380 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 741a66180c37 Credits stealthcopter Required privilege Unauthenticated...