Lucene search
+L

186 matches found

OSV
OSV
added 2023/12/15 3:15 p.m.7 views

CVE-2023-49184

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

5.4CVSS7.3AI score0.00374EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/15 3:15 p.m.23 views

CVE-2023-49184

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

5.9CVSS0.00374EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/15 3:15 p.m.26 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

4.9CVSS6.9AI score0.00374EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/15 2:56 p.m.72 views

CVE-2023-49184

CVE-2023-49184 corresponds to a Stored XSS in WPDeveloper Parallax Slider Block. Affected versions are Parallax Slider Block:

5.9CVSS6.7AI score0.00374EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/15 2:56 p.m.37 views

CVE-2023-49184 WordPress Parallax Slider Block Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

5.9CVSS5.9AI score0.00374EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/18 11:15 p.m.33 views

CVE-2023-32245

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8...

8.8CVSS0.00271EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/18 11:15 p.m.28 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8...

6.8CVSS7.2AI score0.00271EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/18 10:32 p.m.70 views

CVE-2023-32245

CVE-2023-32245 affects WordPress Essential Addons for Elementor Pro (versions up to and including 5.4.8). Connected sources specify a Server-Side Request Forgery (SSRF) vulnerability that is unauthenticated. The issue is mitigated by upgrading to version 5.4.9 or later. Exploitation status is not...

8.8CVSS8.5AI score0.00271EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/18 10:32 p.m.18 views

CVE-2023-32245 WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8...

5.4CVSS7AI score0.00271EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/07 5:15 p.m.26 views

CVE-2022-46809

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

9.8CVSS0.00794EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/07 4:37 p.m.42 views

CVE-2022-46809

CVE-2022-46809 affects WordPress ReviewX – Multi-criteria Rating & Reviews for WooCommerce (WPDeveloper). The vulnerable component is ReviewX CSV export functionality (CSV injection) in ReviewX

9.8CVSS8.6AI score0.00794EPSS
SaveExploits0References1Affected Software1
zdt
zdt
added 2023/09/19 12:0 a.m.416 views

WordPress Essential Blocks 4.2.0 / Essential Blocks Pro 1.1.0 PHP Object Injection Vulnerability

Vulnerability Summary from Wordfence Intelligence Description: Insecure Deserialization/PHP Object Injection via queries Affected Plugin: Essential Blocks, Essential Blocks Pro Plugin slug: essential-blocks, essential-blocks-pro Vendor: WPDeveloper Affected versions: = 4.2.0 Free and = 1.1.0 Pro...

9.8CVSS8.8AI score0.0134EPSS
SaveExploits3
Patchstack
Patchstack
added 2023/09/15 12:0 a.m.20 views

WordPress Essential Addons for Elementor Plugin <= 5.8.8 is vulnerable to Privilege Escalation

Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.8.8 Fixed in 5.8.9 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-41955 Patch priority High CVSS severity High 8.8 Developer WPDeveloper PSID 80be75758179...

8.8CVSS6.9AI score0.00626EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/08/29 9:15 p.m.34 views

CVE-2023-32241

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin = 5.4.8 versions...

7.1CVSS6.3AI score0.00371EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/29 9:15 p.m.23 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin = 5.4.8 versions...

5.8CVSS6AI score0.00371EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/08/29 8:11 p.m.61 views

CVE-2023-32241

CVE-2023-32241 affects the WordPress plugin Essential Addons for Elementor Pro (v

7.1CVSS6AI score0.00371EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2023/08/09 6:24 p.m.791 views

Exploit for Missing Authorization in Wpdeveloper Simple_301_Redirects

CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2...

8.8CVSS8.7AI score0.02997EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2023/07/29 8:43 p.m.326 views

Exploit for Improper Authentication in Wpdeveloper Essential_Addons_For_Elementor

Mass-CVE-2023-32243 Mass-CVE-2023-32243 !...

9.8CVSS9.6AI score0.75531EPSS
SaveExploits8
Wordfence Blog
Wordfence Blog
added 2023/05/31 12:27 p.m.43 views

WPDeveloper Addresses Privilege Escalation Vulnerability in ReviewX WordPress Plugin

On May 20, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a Privilege Escalation vulnerability in WPDeveloper’s ReviewX plugin, which is actively installed on more than 10,000 WordPress websites. This vulnerability makes it possible for an...

6.5CVSS6.9AI score0.1748EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2023/05/14 7:32 p.m.245 views

Exploit for Improper Authentication in Wpdeveloper Essential_Addons_For_Elementor

CVE-2023-32243 Essential Addons for Elementor - Unauthorized...

9.8CVSS9.7AI score0.75531EPSS
SaveExploits8
Rows per page
Query Builder