24 matches found
CVE-2026-27357
Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Search Analytics: from n/a before 1.5.0...
CVE-2026-27357
Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Search Analytics: from n/a before 1.5.0...
CVE-2026-27357: Missing Authorization
Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Search Analytics: from n/a before 1.5.0...
EUVD-2024-40123
Malicious code in bioql PyPI...
EUVD-2022-50347
Malicious code in bioql PyPI...
EUVD-2023-34886
Malicious code in bioql PyPI...
EUVD-2024-49792
Malicious code in bioql PyPI...
CVE-2024-43229
Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Analytics: from n/a through = 1.4.9...
PT-2024-30392 · Unknown · Wp Search Analytics
Name of the Vulnerable Software and Affected Versions: WP Search Analytics versions 1.4.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WP Search Analytics...
CVE-2024-43229: Missing Authorization
Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Analytics: from n/a through = 1.4.9...
CVE-2024-9209
The WP Search Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...
WordPress plugin WP Search Analytics 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
WordPress WP Search Analytics Plugin <= 1.4.10 is vulnerable to Cross Site Scripting (XSS)
Software WP Search Analytics Type Plugin Vulnerable versions = 1.4.10 Fixed in 1.4.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9209 Patch priority Medium CVSS severity Medium 7.1 Developer Cornel Raiu PSID 95b75262f4d2 Credits vgo0 Required...
CVE-2024-9209: Improper Neutralization of Input During Web Page Generation
The WP Search Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...
CVE-2023-30471
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cornel Raiu WP Search Analytics plugin = 1.4.7 versions...
CVE-2023-30471
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cornel Raiu WP Search Analytics plugin = 1.4.7 versions...
CVE-2023-30471
CVE-2023-30471 is a reflected XSS vulnerability in the WordPress plugin WP Search Analytics (Cornel Raiu)
PT-2023-22711
Name of the Vulnerable Software and Affected Versions Cornel Raiu WP Search Analytics plugin versions 1.4.7 and earlier Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited without authentication, allowing for reflect...
CVE-2023-30471: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cornel Raiu WP Search Analytics plugin = 1.4.7 versions...