104 matches found
PT-2024-24582 · WordPress · Wpwax Legal Pages
Name of the Vulnerable Software and Affected Versions: wpWax Legal Pages versions 1.4.2 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user...
CVE-2024-29925
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Post Grid, Slider & Carousel Ultimate allows Stored XSS.This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through 1.6.6...
PT-2024-23148 · WordPress · Wpwax Post Grid
Name of the Vulnerable Software and Affected Versions: wpWax Post Grid, Slider & Carousel Ultimate versions 1.6.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means...
CVE-2023-50886
Cross-Site Request Forgery CSRF, Incorrect Authorization vulnerability in wpWax Legal Pages.This issue affects Legal Pages: from n/a through 1.3.7...
CVE-2023-50886
The CVE-2023-50886 entry covers the WordPress plugin wpWax Legal Pages (versions 1.3.7 (i.e., 1.3.8 or later). Public sources report a base score of 8.0 (NVD) indicating HIGH severity, while PatchStack notes a lower 4.3 MEDIUM score, highlighting conflicting assessments. Exploitation details are...
PT-2024-13993 · WordPress · Wpwax Legal Pages
Name of the Vulnerable Software and Affected Versions: wpWax Legal Pages versions 1.3.7 and earlier Description: The issue is related to Cross-Site Request Forgery CSRF and Incorrect Authorization in wpWax Legal Pages. This allows for unauthorized actions to be performed. Recommendations: For...
CVE-2023-47824
Cross-Site Request Forgery CSRF vulnerability in wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin = 1.3.8 versions...
CVE-2023-47824
Cross-Site Request Forgery CSRF vulnerability in wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin = 1.3.8 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin = 1.3.8 versions...
CVE-2023-47824
CVE-2023-47824: Cross-Site Request Forgery in WordPress plugin Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator (
CVE-2023-41798
A vulnerability in wpWax Directorist directorist.This issue affects Directorist: from n/a through = 7.7.1...
CVE-2023-41798 WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: from n/a through 7.7.1...
CVE-2023-41798 WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: from n/a through 7.7.1...
CVE-2023-41798
CVE-2023-41798 is a CSV injection vulnerability affecting the Directorist – WordPress Business Directory Plugin with Classified Ads Listings, specifically versions 7.7.1 and earlier. The root cause is improper neutralization of formulas in CSV files used by the plugin. Impact involves potential d...
WordPress wpWax Team Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress wpWax Team 1.2.6 and prior versions, which stems from the program's lack of checksum...
CVE-2022-34853
Multiple Authenticated contributor or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in wpWax Team plugin = 1.2.6 at WordPress...
CVE-2022-34853
Multiple Authenticated contributor or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in wpWax Team plugin = 1.2.6 at WordPress...
CVE-2022-34650
Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in wpWax Team plugin = 1.2.6 at WordPress...