20 matches found
EUVD-2024-30506
Malicious code in bioql PyPI...
EUVD-2024-30368
Malicious code in bioql PyPI...
CVE-2024-32566
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through = 2.2.11...
CVE-2024-32719
Missing Authorization vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through = 2.2.11...
CVE-2024-32719
Missing Authorization vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through = 2.2.11...
CVE-2024-32719: Missing Authorization
Missing Authorization vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through = 2.2.11...
CVE-2024-32719 WordPress WP Club Manager plugin <= 2.2.11 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through = 2.2.11...
CVE-2024-32719
CVE-2024-32719 concerns the WP Club Manager WordPress plugin with a Missing Authorization vulnerability affecting versions up to 2.2.11. Public sources in the connected documents identify WP Club Manager and the issue as a lack of authorization control, enabling potential unauthorized access. Red...
WordPress WP Club Manager Plugin <= 2.2.11 is vulnerable to Broken Access Control
Software WP Club Manager Type Plugin Vulnerable versions = 2.2.11 Fixed in 2.2.12 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32719 Patch priority Low CVSS severity Low 5.3 Developer WP Club Manager PSID 9c15961e31ea Credits Mika Required privilege...
CVE-2024-32566
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through = 2.2.11...
CVE-2024-32566
Affected software: WP Club Manager (WordPress plugin). Vulnerability: Stored XSS due to improper neutralization of input during web page generation (CVE-2024-32566). Root cause: inadequate input handling leading to stored cross-site scripting. Impact: Stored XSS affecting WP Club Manager
CVE-2024-32566 WordPress WP Club Manager plugin <= 2.2.11 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through = 2.2.11...
CVE-2024-32566 WordPress WP Club Manager plugin <= 2.2.11 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through = 2.2.11...
CVE-2024-32566: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through = 2.2.11...
PT-2024-24687
Name of the Vulnerable Software and Affected Versions WP Club Manager versions 2.2.11 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...
WordPress WP Club Manager Plugin <= 2.2.11 is vulnerable to Cross Site Scripting (XSS)
Software WP Club Manager Type Plugin Vulnerable versions = 2.2.11 Fixed in 2.2.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-32566 Patch priority Low CVSS severity Low 6.5 Developer WP Club Manager PSID 673c46e5f536 Credits CatFather Required...
CVE-2024-1177
The WP Club Manager – WordPress Sports Club Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the settingssave function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to update th...
CVE-2024-1177
CVE-2024-1177 concerns the WP Club Manager WordPress plugin. Multiple connected sources confirm a missing capability check in settings_save() across versions up to and including 2.2.10, causing unauthorized modification of data by unauthenticated users and allowing updates to the clubs permalink ...
CVE-2024-1177 WP Club Manager – WordPress Sports Club Plugin <= 2.2.10 - Missing Authorization to Unauthenticated Event Permalink Update
The WP Club Manager – WordPress Sports Club Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the settingssave function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to update th...
CVE-2024-1177: Missing Authorization
The WP Club Manager – WordPress Sports Club Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the settingssave function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to update th...