82 matches found
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.1...
CVE-2023-31219
CVE-2023-31219 affects the WPChill Download Monitor WordPress plugin, with vulnerable versions 4.8.1 and earlier. The issue is a Server-Side Request Forgery (SSRF) that allows an attacker with Administrator privileges to trigger unintended server requests. The published fix is version 4.8.2. Patc...
CVE-2023-26013
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WPChill Strong Testimonials plugin = 3.0.2 versions...
CVE-2023-26013
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WPChill Strong Testimonials plugin = 3.0.2 versions...
CVE-2023-26013
The CVE-2023-26013 entry concerns the WordPress plugin WPChill Strong Testimonials, affected through stored XSS in versions
PT-2023-20425 · Wpchill · Wpchill Strong Testimonials
Name of the Vulnerable Software and Affected Versions: WPChill Strong Testimonials plugin versions prior to 3.0.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher permissions. Recommendations: For WPChill Strong...
WordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)
Software Download Monitor Type Plugin Vulnerable versions = 4.8.1 Fixed in 4.8.2 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-31219 Patch priority Low CVSS severity Low 4.1 Developer WPChill PSID fb7b8d305714 Credits Mika Required privilege Administrator...
VulnCheck KEV: CVE-2022-45354
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
CVE-2023-25451
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPChill CPO Content Types plugin = 1.1.0 versions...
CVE-2023-25451
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPChill CPO Content Types plugin = 1.1.0 versions...
CVE-2023-25451 WordPress CPO Content Types Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPChill CPO Content Types plugin = 1.1.0 versions...
CVE-2023-25451
CVE-2023-25451 is a stored cross-site scripting (XSS) vulnerability in the WordPress plugin WPChill CPO Content Types (versions
PT-2023-20071 · Wpchill · Wpchill Cpo Content Types
Name of the Vulnerable Software and Affected Versions: WPChill CPO Content Types plugin versions prior to 1.1.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For WPChill CPO Conte...
CVE-2022-37407
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities in WPChill Gallery PhotoBlocks plugin = 1.2.6 at WordPress...
Cross site scripting
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities in WPChill Gallery PhotoBlocks plugin = 1.2.6 at WordPress...
CVE-2022-37407
The CVE-2022-37407 entry concerns WPChill Gallery PhotoBlocks plugin for WordPress (versions prior to 1.2.7). The root cause is insufficient sanitisation/escaping of parameters, enabling Multiple Authenticated Stored Cross-Site Scripting (XSS) by low-privileged users. Impact is defined as authent...
PT-2022-23979 · Wpchill · Wpchill Gallery Photoblocks
Name of the Vulnerable Software and Affected Versions: WPChill Gallery PhotoBlocks plugin versions prior to 1.2.7 Description: The issue concerns Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities. This means that an attacker could potentially inject malicious scripts into the...
CVE-2022-36292
Cross-Site Request Forgery CSRF vulnerabilities in WPChill Gallery PhotoBlocks plugin = 1.2.6 at WordPress...