27 matches found
CVE-2023-49815
Unrestricted Upload of File with Dangerous Type vulnerability in WappPress Team WappPress.This issue affects WappPress: from n/a through 5.0.3...
EUVD-2024-37603
Malicious code in bioql PyPI...
EUVD-2023-53723
Malicious code in bioql PyPI...
EUVD-2024-40064
Malicious code in bioql PyPI...
CVE-2024-43137
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WappPress Team WappPress allows Stored XSS.This issue affects WappPress: from n/a through 6.0.4...
CVE-2024-38758
Server-Side Request Forgery SSRF vulnerability in WappPress Team WappPress.This issue affects WappPress: from n/a through 6.0.4...
CVE-2024-43137
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WappPress Team WappPress allows Stored XSS.This issue affects WappPress: from n/a through 6.0.4...
CVE-2024-43137 WordPress WappPress Basic plugin <= 6.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WappPress Team WappPress allows Stored XSS.This issue affects WappPress: from n/a through 6.0.4...
CVE-2024-43137
CVE-2024-43137 is a stored XSS in the WappPress WordPress plugin, affecting WappPress versions from n/a up to 6.0.4. Wordfence indicates patching has occurred, but the provided documents do not include exploitation details, exact remediation steps, or vendor-specific patch version.
CVE-2024-43137 WordPress WappPress Basic plugin <= 6.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WappPress Team WappPress allows Stored XSS.This issue affects WappPress: from n/a through 6.0.4...
PT-2024-30326 · Wapppress · Wapppress
Name of the Vulnerable Software and Affected Versions: WappPress versions through 6.0.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions throu...
WordPress WappPress Basic plugin <= 6.0.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by hunter85 Patchstack Alliance in WordPress Plugin WappPress versions = 6.0.4...
WordPress WappPress Plugin <= 6.0.4 is vulnerable to Cross Site Scripting (XSS)
Software WappPress Type Plugin Vulnerable versions = 6.0.4 Fixed in 6.0.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43137 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c662c1a408b4 Credits hunter85 Required privilege Administrator...
CVE-2024-38758
Server-Side Request Forgery SSRF vulnerability in WappPress Team WappPress.This issue affects WappPress: from n/a through 6.0.4...
CVE-2024-38758 WordPress WappPress plugin <= 6.0.4 - Blind Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in WappPress Team WappPress.This issue affects WappPress: from n/a through 6.0.4...
CVE-2024-38758
CVE-2024-38758: Affected product is WappPress (WordPress plugin) versions up to and including 6.0.4, with a Blind SSRF vulnerability. Root cause: vulnerable component allows the server to make unintended external requests. Impact per sources: potential confidentiality and integrity impact is low;...
CVE-2024-38758 WordPress WappPress plugin <= 6.0.4 - Blind Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in WappPress Team WappPress.This issue affects WappPress: from n/a through 6.0.4...
WordPress WappPress plugin <= 6.0.4 - Blind Server Side Request Forgery (SSRF) vulnerability
Blind Server Side Request Forgery SSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin WappPress versions = 6.0.4...
WordPress WappPress Plugin <= 6.0.4 is vulnerable to Server Side Request Forgery (SSRF)
Software WappPress Type Plugin Vulnerable versions = 6.0.4 Fixed in 6.0.5 OWASP Top 10 A4: Insecure Design Classification Server Side Request Forgery SSRF CVE CVE-2024-38758 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID ab01de2e65ef Credits Majed Refaea Required privileg...
CVE-2023-49815
Unrestricted Upload of File with Dangerous Type vulnerability in WappPress Team WappPress.This issue affects WappPress: from n/a through 5.0.3...