234 matches found
WordPress YayExtra plugin <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function vulnerability
Unauthenticated Arbitrary File Upload via handleuploadfile Function vulnerability discovered by wesley wcraft in WordPress Plugin YayExtra versions = 1.3.7...
MAL-2024-7833 Malicious code in noc-chatbot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404db7a5f4f99325b3d619a50290cc88ef3bdd8cc789301a4d3c54c655a20418 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-27635 · Unknown · Uusweb.Ee Ws Contact Form
Name of the Vulnerable Software and Affected Versions: UusWeb.Ee WS Contact Form versions 1.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations...
WordPress i-amaze theme <= 1.3.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme i-amaze versions = 1.3.7...
WordPress WS Contact Form Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)
Software WS Contact Form Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37537 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9166c1a50a0c Credits younsoung kim, SeoHyeon Lee, MyungJu...
WordPress Metro Magazine theme <= 1.3.7 - Broken Access Control on Notice Dismissal vulnerability
Broken Access Control on Notice Dismissal vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Metro Magazine versions = 1.3.7...
WordPress plugin TweetScroll Widget 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-25580 · Unknown · Tweetscroll Widget
Name of the Vulnerable Software and Affected Versions: TweetScroll Widget versions 1.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the TweetScroll Widget...
WordPress TweetScroll Widget Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)
Software TweetScroll Widget Type Plugin Vulnerable versions = 1.3.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33948 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 3dc090758c1a Credits Joshua Chan Required privilege...
WordPress Pearl Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)
Software Pearl Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4000 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 24b9141edb4a Credits Krzysztof Zając Required privilege...
PT-2024-24292 · Polevaultweb · Polevaultweb Intagrate Lite
Name of the Vulnerable Software and Affected Versions: Polevaultweb Intagrate Lite versions 1.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations:...
WordPress Intagrate Lite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Intagrate Lite versions = 1.3.7...
CVE-2024-30423
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BetterAddons Better Elementor Addons allows Stored XSS.This issue affects Better Elementor Addons: from n/a through 1.3.7...
PT-2024-23350 · Unknown · Better Elementor Addons
Name of the Vulnerable Software and Affected Versions: Better Elementor Addons versions 1.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
CVE-2024-30230
Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce.This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a through 1.3.7...
WordPress Better Elementor Addons Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)
Software Better Elementor Addons Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30423 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f9eec0bdba86 Credits Khalid Yusuf Required privileg...
PT-2024-23150
Name of the Vulnerable Software and Affected Versions HasTheme WishSuite versions 1.3.7 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can inject malicious scrip...
CVE-2023-38481
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin: from n/a before 1.3.7...
WordPress plugin Integration for WooCommerce and Zoho CRM Input Validation Error Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabilit...