Lucene search
+L

109 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 8:05 a.m.13 views

CVE-2024-29774

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WpDirectoryKit WP Directory Kit allows Reflected XSS.This issue affects WP Directory Kit: from n/a through 1.2.9...

7.1CVSS8.6AI score0.00421EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:48 a.m.13 views

CVE-2024-37487

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wpdirectorykit.Com WP Directory Kit allows Reflected XSS.This issue affects WP Directory Kit: from n/a through 1.3.5...

7.1CVSS6.9AI score0.00327EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/13 3:15 p.m.10 views

CVE-2023-41875

Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through 1.2.6...

9.8CVSS0.00636EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:24 p.m.23 views

CVE-2023-41875 WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through 1.2.6...

5.3CVSS0.00636EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:24 p.m.15 views

CVE-2023-41875 WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.2.6...

5.3CVSS7.3AI score0.00636EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.8 views

PT-2024-13005 · WordPress · Wp Directory Kit

Name of the Vulnerable Software and Affected Versions: WP Directory Kit versions 1.2.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WP Directory Kit...

9.8CVSS9.4AI score0.00636EPSS
SaveExploits0References5
NVD
NVD
added 2024/07/21 8:15 a.m.35 views

CVE-2024-37487

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wpdirectorykit.Com WP Directory Kit allows Reflected XSS.This issue affects WP Directory Kit: from n/a through 1.3.5...

7.1CVSS0.00327EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/21 7:32 a.m.16 views

CVE-2024-37487 WordPress WP Directory Kit plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in wpdirectorykit.Com WP Directory Kit allows Reflected XSS.This issue affects WP Directory Kit: from n/a through 1.3.5...

7.1CVSS7AI score0.00327EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/21 7:32 a.m.69 views

CVE-2024-37487

CVE-2024-37487 affects WP Directory Kit (WordPress plugin) with a reflected XSS due to improper input neutralization during web page generation. Affected: WP Directory Kit ≤ 1.3.5. CVSS data from sources in the connected docs show Network attack vector, Low confidentiality/integrity impact, user ...

7.1CVSS7AI score0.00327EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/07/09 10:15 a.m.8 views

CVE-2024-37253

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in WpDirectoryKit WP Directory Kit allows Code Injection.This issue affects WP Directory Kit: from n/a through 1.3.6...

2.7CVSS5.8AI score0.00316EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/04/17 1:43 p.m.115 views

Exploit for SQL Injection in Wpdirectorykit Wp_Directory_Kit

CVE-2024-3217-POC Mitre Description The WP Directory Kit...

8.8CVSS7.9AI score0.01869EPSS
SaveExploits1
CNNVD
CNNVD
added 2024/04/05 12:00 a.m.10 views

WordPress Plugin WP Directory Kit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security...

8.8CVSS9AI score0.01869EPSS
SaveExploits1References4
CVE
CVE
added 2024/03/27 12:54 p.m.80 views

CVE-2024-29774

CVE-2024-29774 is a Reflected XSS in WP Directory Kit (WPDirectoryKit) due to Improper Neutralization of Input During Web Page Generation. Affected: WPDirectoryKit versions from n/a through 1.2.9. Root cause, impact, and remediation details are present in connected sources (Red Hat and ENISA entr...

7.1CVSS8.6AI score0.00421EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/27 12:54 p.m.25 views

CVE-2024-29774 WordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WpDirectoryKit WP Directory Kit allows Reflected XSS.This issue affects WP Directory Kit: from n/a through 1.2.9...

7.1CVSS7.1AI score0.00421EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/29 10:15 a.m.9 views

CVE-2023-31229

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in WP Directory Kit.This issue affects WP Directory Kit: from n/a through 1.1.9...

6.1CVSS7.3AI score0.00326EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/29 10:15 a.m.26 views

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in WP Directory Kit.This issue affects WP Directory Kit: from n/a through 1.1.9...

5.8CVSS7.1AI score0.00326EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/29 9:53 a.m.52 views

CVE-2023-31229

CVE-2023-31229: Open Redirection in WordPress WP Directory Kit (

6.1CVSS7AI score0.00326EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/29 12:00 a.m.11 views

WordPress Plugin WP Directory Kit Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.1CVSS6.6AI score0.00326EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/29 12:00 a.m.8 views

PT-2023-23250 · WordPress · Wp Directory Kit

Name of the Vulnerable Software and Affected Versions: WP Directory Kit versions 1.1.9 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, in WP Directory Kit. This vulnerability allows for redirection to untrusted...

6.1CVSS6.5AI score0.00326EPSS
SaveExploits0References7
CVE
CVE
added 2023/08/31 5:33 a.m.46 views

CVE-2023-2279

CVE-2023-2279 pertains to the WP Directory Kit WordPress plugin. Concrete details show a CSRF vulnerability in versions up to 1.2.1 due to missing/incorrect nonce validation in the admin_page_display function, enabling unauthenticated attackers to delete or modify plugin settings, import demo dat...

5.4CVSS5.1AI score0.00294EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder