16662 matches found
CVE-2024-55991
CVE-2024-55991 affects the WordPress plugin WP-CRM System (versions up to 3.2.9.1). The root cause is a Missing Authorization vulnerability due to incorrectly configured access control, enabling unauthorized access. Documented details indicate Broken Access Control as the weakness, impacting WP-C...
CVE-2023-48775 WordPress WP CleanFix plugin <= 5.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2...
CVE-2023-48775 WordPress WP CleanFix plugin <= 5.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2...
CVE-2024-56226
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Reflected XSS.This issue affects Royal Elementor Addons: from n/a through = 1.7.1001...
CVE-2024-56227
Missing Authorization vulnerability in WP Royal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through 1.7.1001...
CVE-2024-56232
Cross-Site Request Forgery CSRF vulnerability in Alex Volkov WP Nice Loader wp-nice-loader allows Stored XSS.This issue affects WP Nice Loader: from n/a through = 0.1.0.4...
CVE-2024-56232
Cross-Site Request Forgery CSRF vulnerability in Alexander Volkov WP Nice Loader allows Stored XSS.This issue affects WP Nice Loader: from n/a through 0.1.0.4...
CVE-2024-56232 WordPress WP Nice Loader plugin <= 0.1.0.4 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Alex Volkov WP Nice Loader wp-nice-loader allows Stored XSS.This issue affects WP Nice Loader: from n/a through = 0.1.0.4...
CVE-2024-56232
CVE-2024-56232 : In WP Nice Loader (WordPress plugin wp-nice-loader), a Cross-Site Request Forgery (CSRF) condition enables Stored XSS. Affected versions are up to and including 0.1.0.4. Public references in RH and WD entries confirm the CSRF-to-Stored XSS behavior, but no fix/version is specifie...
CVE-2024-56232 WordPress WP Nice Loader plugin <= 0.1.0.4 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Alex Volkov WP Nice Loader wp-nice-loader allows Stored XSS.This issue affects WP Nice Loader: from n/a through = 0.1.0.4...
PT-2024-36704 · WordPress · Azzaroco Wp Superbackup
Name of the Vulnerable Software and Affected Versions: Azzaroco WP SuperBackup versions 2.3.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. This can lead to unauthorized...
WordPress plugin WP SuperBackup 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...
WordPress plugin My Wp Brand 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress plugin WP SuperBackup 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-33647 · Imw3 · My Wp Brand – Hide Menu & Hide Plugin
Name of the Vulnerable Software and Affected Versions: My Wp Brand – Hide menu & Hide Plugin versions 1.1.2 and below Description: A Missing Authorization vulnerability is present in the imw3 My Wp Brand – Hide menu & Hide Plugin. This issue allows for unauthorized access. Recommendations: For...
WordPress WP Publications plugin <= 1.2 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Zeynalxan Quliyev, Revan Poladl in WordPress Plugin WP Publications versions = 1.2...
CVE-2024-11644
The WP-SVG WordPress plugin through 0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-11644 WP-SVG <= 0.9 - Contributor+ Stored XSS via Shortcode
The WP-SVG WordPress plugin through 0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-11644 WP-SVG <= 0.9 - Contributor+ Stored XSS via Shortcode
The WP-SVG WordPress plugin through 0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...