82 matches found
CVE-2024-32429
CVE-2024-32429 refers to an authenticated, stored cross-site scripting vulnerability in the WordPress plugin Remove Footer Credit (affected:
PT-2024-24558 · Wpchill · Wpchill Remove Footer Credit
Name of the Vulnerable Software and Affected Versions: WPChill Remove Footer Credit versions 1.0.13 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can injec...
CVE-2024-30501
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...
CVE-2024-30501 WordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...
CVE-2024-30501
The CVE-2024-30501 entry concerns WPChill’s Download Monitor plugin (WordPress) up to version 4.9.4, where an improper neutralization of SQL elements causes an SQL Injection. The vulnerability affects the plugin’s admin-facing code and can impact confidentiality, integrity, and availability as de...
CVE-2022-45354
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
CVE-2022-45354
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
CVE-2022-45354
The CVE-2022-45354 entry concerns the WordPress plugin Download Monitor
CVE-2022-45354 WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
WordPress Download Monitor Plugin < 4.9.5 is vulnerable to SQL Injection
Software Download Monitor Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE N/A Patch priority Low CVSS severity Low 7.2 Developer WPChill PSID 1be01d6b3a78 Credits WordFence Required privilege Administrator Published 8 January, 2024...
CVE-2023-52123
Cross-Site Request Forgery CSRF vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10...
CVE-2023-52123
Cross-Site Request Forgery CSRF vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10...
CVE-2023-52123
CVE-2023-52123 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WPChill Strong Testimonials, affecting version 3.1.10 and earlier. Per NVD, impact is high (C/H/I/H) with CVSS 3.1 base score 8.8. PatchStack documents a lower severity (CVSS 3.1 base 4.3) and notes...
CVE-2023-34007
Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...
CVE-2023-34007
Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...
CVE-2023-34007
The CVE-2023-34007 entry concerns the WPChill WordPress Download Monitor plugin. Affected software is WordPress Download Monitor plugin versions