12 matches found
EUVD-2022-33744
Malicious code in bioql PyPI...
EUVD-2024-37555
Malicious code in bioql PyPI...
CVE-2025-58222 WordPress Team Manager plugin <= 2.6.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Dynamic Web Lab Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through 2.6.8...
CVE-2024-38704
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DynamicWebLab WordPress Team Manager allows PHP Local File Inclusion.This issue affects WordPress Team Manager: from n/a through 2.1.12...
PT-2024-28148
Name of the Vulnerable Software and Affected Versions DynamicWebLab WordPress Team Manager versions 2.1.12 and earlier Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion...
WordPress plugin WordPress Team Manager Path Traversal Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
CVE-2024-38704: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DynamicWebLab WordPress Team Manager allows PHP Local File Inclusion.This issue affects WordPress Team Manager: from n/a through 2.1.12...
WordPress WordPress Team Manager Plugin <= 2.1.12 is vulnerable to Local File Inclusion
Software WordPress Team Manager Type Plugin Vulnerable versions = 2.1.12 Fixed in 2.1.13 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-38704 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 772c457874f8 Credits 4rCanJ0x! Required...
CVE-2022-29406 WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in DynamicWebLab's WordPress Team Manager plugin = 1.6.9 at WordPress...
PT-2022-19581
Name of the Vulnerable Software and Affected Versions DynamicWebLab's WordPress Team Manager plugin versions 1.6.9 and earlier Description The issue concerns multiple authenticated Stored Cross-Site Scripting XSS vulnerabilities. These vulnerabilities require an attacker to have at least a...
CVE-2022-29406: Improper Neutralization of Input During Web Page Generation
Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in DynamicWebLab's WordPress Team Manager plugin = 1.6.9 at WordPress...
WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in the WordPress Team Manager plugin versions = 1.6.9. Solution Deactivate and delete. No reply from the vendor...