EUVD-2023-36764

Malicious code in bioql PyPI...

EUVD-2023-26832

Malicious code in bioql PyPI...

CVE-2023-22703

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP Contact Form plugin = 3.1.0 versions...

CVE-2023-32519

Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0...

CVE-2023-32520

Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0...

CVE-2023-32519

Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0...

CVE-2023-32520 WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0...

CVE-2023-32520

CVE-2023-32520: WordPress WCP Contact Form plugin, versions

CVE-2023-32519 WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0...

CVE-2023-32520: Missing Authorization

Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0...

CVE-2023-32519: Missing Authorization

Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0...

WordPress plugin WCP Contact Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exis...

CVE-2023-22703 WordPress WCP Contact Form Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP Contact Form plugin = 3.1.0 versions...

CVE-2023-22703

CVE-2023-22703 concerns the WordPress plugin WCP Contact Form by Webcodin, with a Reflected Cross-Site Scripting (XSS) vulnerability in versions ≤ 3.1.0. The root cause is insufficient sanitisation of the tab parameter, causing unauthenticated, network-exposed but user-initiated (UI: REQUIRED) XS...

PT-2023-18646

Name of the Vulnerable Software and Affected Versions Webcodin WCP Contact Form plugin versions prior to 3.1.0 Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, potentially...

CVE-2023-22703: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP Contact Form plugin = 3.1.0 versions...

WordPress plugin WCP Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress WCP Contact Form Plugin <= 3.1.0 is vulnerable to Broken Access Control

Software WCP Contact Form Type Plugin Vulnerable versions = 3.1.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32519 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 800f19fbe762 Credits thiennv Required privilege...

WordPress WCP Contact Form Plugin <= 3.1.0 is vulnerable to Broken Access Control

Software WCP Contact Form Type Plugin Vulnerable versions = 3.1.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32520 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 37d423cfc955 Credits thiennv Required privilege...

WCP Contact Form <= 3.1.0 - Reflected XSS

The plugin does not sanitise and escape the tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...