304 matches found
Multiple Plugins from Wow-Company - Reflected XSS
The plugins do not escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC Make a logged in admin open a page with the code below The XSS will be triggered when pressing...
CVE-2023-23984
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Bubble Menu – circle floating menu plugin = 3.0.1 leading to form deletion...
CVE-2023-23984
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Bubble Menu – circle floating menu plugin = 3.0.1 leading to form deletion...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Bubble Menu – circle floating menu plugin = 3.0.1 leading to form deletion...
CVE-2023-23984
The CVE-2023-23984 entry concerns the WordPress plugin Wow-Company Bubble Menu – circle floating menu (versions
PT-2023-19338 · Wow Company · Wow-Company Bubble Menu
Name of the Vulnerable Software and Affected Versions: Wow-Company Bubble Menu – circle floating menu plugin versions = 3.0.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which can lead to form deletion. Recommendations: For Wow-Company Bubble Menu – circle floating...
CVE-2022-29447
Authenticated administrator or higher user role Local File Inclusion LFI vulnerability in Wow-Company's Hover Effects plugin = 2.1 at WordPress...
CVE-2022-29447
Authenticated administrator or higher user role Local File Inclusion LFI vulnerability in Wow-Company's Hover Effects plugin = 2.1 at WordPress...
CVE-2022-29447
CVE-2022-29447 concerns the WordPress Hover Effects plugin (versions
CVE-2022-29447 WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability
Authenticated administrator or higher user role Local File Inclusion LFI vulnerability in Wow-Company's Hover Effects plugin = 2.1 at WordPress...
CVE-2022-29447 WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability
Authenticated administrator or higher user role Local File Inclusion LFI vulnerability in Wow-Company's Hover Effects plugin = 2.1 at WordPress...
CVE-2022-29448
Authenticated admin or higher user role Local File Inclusion LFI vulnerability in Wow-Company's Herd Effects plugin = 5.2 at WordPress...
Design/Logic Flaw
Authenticated admin or higher user role Local File Inclusion LFI vulnerability in Wow-Company's Herd Effects plugin = 5.2 at WordPress...
CVE-2022-29448
CVE-2022-29448 describes a Local File Inclusion (LFI) vulnerability in WordPress Herd Effects plugin prior to or at version 5.2, requiring an authenticated admin or higher user to exploit. The issue stems from inadequate validation in how local file resources are selected for inclusion, allowing ...
CVE-2022-29446
Authenticated administrator or higher role Local File Inclusion LFI vulnerability in Wow-Company's Counter Box plugin = 1.1.1 at WordPress...
CVE-2022-29446
Authenticated administrator or higher role Local File Inclusion LFI vulnerability in Wow-Company's Counter Box plugin = 1.1.1 at WordPress...
Design/Logic Flaw
Authenticated administrator or higher role Local File Inclusion LFI vulnerability in Wow-Company's Counter Box plugin = 1.1.1 at WordPress...
CVE-2022-29446
CVE-2022-29446 describes an authenticated Local File Inclusion (LFI) vulnerability in Wow-Company’s WordPress Counter Box plugin, versions