Malicious code in ent-widget-ssn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d56160353925d7d4c18c2e8cc517fa031138c0b57634f16503d9db72ccbb6087 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-unauth-msr-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 419ac24fa162a7dce946aee3790e098b29f502b45d13b9f29c0895aa078a5c52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7819 Malicious code in ent-widget-unauth-msr-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 419ac24fa162a7dce946aee3790e098b29f502b45d13b9f29c0895aa078a5c52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7811 Malicious code in ent-file-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e476e9a95e121c935215443a2069d17764649684cdf226b5d429ea50a9c8c422 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-military (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbdebed9b78571c779a871a94b08827dce4891379340dbcdcac9864d33d6435d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-occupation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ea664a8546797ec435ec8725f1fce33acd75fc620565baa7327765abaf9ea08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7814 Malicious code in ent-widget-gender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2c0c2b743a2c55939970f237481ed095952aa3b07c769580ed7564e1be2f14b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-gender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2c0c2b743a2c55939970f237481ed095952aa3b07c769580ed7564e1be2f14b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-itin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74866ef0b48139c5d18376332fe503f8549ad31d7b85f58820832b1b3147a871 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7815 Malicious code in ent-widget-itin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74866ef0b48139c5d18376332fe503f8549ad31d7b85f58820832b1b3147a871 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-addcap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dac2383ab705d5e1f919508cfae3ccfb37e6f6ae1eca078ed12436c55bc7be6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7812 Malicious code in ent-widget-addcap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dac2383ab705d5e1f919508cfae3ccfb37e6f6ae1eca078ed12436c55bc7be6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7813 Malicious code in ent-widget-address (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9273fe0a35c0d622fe4cfcd42ee9fccba89cdaa4c258f0f4af1d476f8d87d38e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-address (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9273fe0a35c0d622fe4cfcd42ee9fccba89cdaa4c258f0f4af1d476f8d87d38e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-37756 · WordPress · Happy Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Happy Addons for Elementor plugin for WordPress versions up to, and including, 3.11.2 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's PDF View widget, allowing...

CVE-2024-5818 Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOM-based Cross-Site Scripting via the plugin's Magazine Grid/Slider widget in all versions up to, and including, 1.3.980 due to insufficient input sanitization and output escaping on user supplied attributes...

CVE-2024-5818 Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOM-based Cross-Site Scripting via the plugin's Magazine Grid/Slider widget in all versions up to, and including, 1.3.980 due to insufficient input sanitization and output escaping on user supplied attributes...

WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget vulnerability discovered by Webbernaut in WordPress Plugin Royal Elementor Addons versions = 1.3.980...

PT-2024-37180 · WordPress · The Royal Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons and Templates plugin for WordPress versions up to, and including, 1.3.980 Description: The issue is related to Stored DOM-based Cross-Site Scripting via the plugin's Magazine Grid/Slider widget due to insufficient...

WordPress Language Translate Widget for WordPress – ConveyThis Plugin <= 234 is vulnerable to Broken Access Control

Software Language Translate Widget for WordPress – ConveyThis Type Plugin Vulnerable versions = 234 Fixed in 235 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-38792 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b86aa3788718...