CVE-2024-51623 WordPress WP EIS plugin <= 1.3.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mehral WP EIS wp-eis allows SQL Injection.This issue affects WP EIS: from n/a through = 1.3.3...

CVE-2024-51703

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in laura20 WP-Basics wp-basics allows Reflected XSS.This issue affects WP-Basics: from n/a through = 2.0...

CVE-2024-51676

CVE-2024-51676 is a Cross-Site Scripting (DOM-based XSS) vulnerability in the WordPress plugin Delisho (dr-widgets-blocks). It affects Delisho versions up to and including 1.0.6 and arises from improper input neutralization during web page generation. The issue has a CVSS v3.1 base score of 6.5 (...

CVE-2024-51690 WordPress Wp Slide Categorywise plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in neelam.samariya Wp Slide Categorywise wp-slide-categorywise allows Reflected XSS.This issue affects Wp Slide Categorywise: from n/a through = 1.1...

CVE-2024-51690

CVE-2024-51690 is a reflected XSS vulnerability in the WordPress plugin WP Slide Categorywise. The issue arises from improper neutralization of input during web page generation, enabling reflected XSS. It affects WP Slide Categorywise versions up to 1.1. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:...

CVE-2024-51690 WordPress Wp Slide Categorywise plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in neelam.samariya Wp Slide Categorywise wp-slide-categorywise allows Reflected XSS.This issue affects Wp Slide Categorywise: from n/a through = 1.1...

CVE-2024-51703 WordPress WP-Basics plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in laura20 WP-Basics wp-basics allows Reflected XSS.This issue affects WP-Basics: from n/a through = 2.0...

CVE-2024-51703

CVE-2024-51703 represents a reflected XSS in WordPress plugin WP-Basics (Genethick WP-Basics). Root cause: improper neutralization of input during web page generation. Affects WP-Basics up to version 2.0; CVSS 3.1/7.1 (HIGH). Connected Red Hat advisory confirms the issue; no public exploit or rem...

CVE-2024-51705

CVE-2024-51705 affects WP MMenu Lite (versions: n/a to 1.0.0). It is a reflected Cross‑Site Scripting vulnerability described as Improper Neutralization of Input During Web Page Generation, i.e., input reflected in the generated page. Connected sources (including RH and ENISA records) corroborate...

CVE-2024-51707 WordPress WP Visual Adverts plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodin WP Visual Adverts wp-visual-adverts allows Reflected XSS.This issue affects WP Visual Adverts: from n/a through = 2.3.0...

CVE-2024-51707

CVE-2024-51707 is a reflected XSS in the WordPress plugin WP Visual Adverts (vulnerable through 2.3.0) due to improper input neutralization during web page generation. Connected sources corroborate the impact type (Reflected XSS) and affected software (WP Visual Adverts). No public details about ...

CVE-2024-10547

The WP Membership plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the userprofileimageupload function in all versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

CVE-2024-10470

The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks in the readfile and unlink functions in all versions up to, and including, 4.962. This makes it...

PT-2024-34850 · Genethick · Genethick Wp-Basics

Name of the Vulnerable Software and Affected Versions: Genethick WP-Basics versions through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. The problem lies in the handling...

WordPress plugin Wp Slide Categorywise 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Blrt WP Embed SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress plugin WP Membership 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress Combo WP Rewrite Slugs plugin <= 1.0 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Combo WP Rewrite Slugs versions = 1.0...

WordPress Combo WP Rewrite Slugs Plugin <= 1.0 is vulnerable to Settings Change

Software Combo WP Rewrite Slugs Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-51817 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e956307de9d1 Credits Mika Required privilege Subscrib...

WordPress WP Agenda Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Agenda Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51924 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2e8995618b9e Credits SOPROBRO Required privilege Contributor Publishe...