CVE-2024-8656 WPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting

The WPFactory Helper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.7.0. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...

WordPress plugin WPFactory Helper 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

WordPress WPFactory Helper Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)

Software WPFactory Helper Type Plugin Vulnerable versions = 1.7.0 Fixed in 1.7.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8656 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4015f045635d Credits vgo0 Required...

PT-2024-39155 · WordPress · Wpfactory Helper

Name of the Vulnerable Software and Affected Versions: WPFactory Helper plugin for WordPress versions up to, and including, 1.7.0 Description: The WPFactory Helper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on...

CVE-2024-43127

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.11...

CVE-2024-43127

CVE-2024-43127 is a reflected XSS affecting the WordPress plugin “Products, Order & Customers Export for WooCommerce”. The vulnerability is described as Improper Neutralization of Input During Web Page Generation and affects versions from n/a up to and including 2.0.11. The connected records indi...

CVE-2024-43127 WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.11...

CVE-2024-43127 WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.11...

CVE-2024-31276

Missing Authorization vulnerability in WPFactory Products, Order & Customers Export for WooCommerce.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.8...

CVE-2024-31276

Missing Authorization vulnerability in WPFactory Products, Order & Customers Export for WooCommerce.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.8...

CVE-2024-31276

CVE-2024-31276 affects the WordPress plugin “Products, Order & Customers Export for WooCommerce” (WPFactory) versions up to 2.0.8. The issue is a Broken/ Missing Authorization vulnerability (Broken Access Control) that permits unauthenticated access to export-related data. Public references repor...

CVE-2024-34370

Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9...

CVE-2024-34370

CVE-2024-34370 refers to an Improper Privilege Management vulnerability in the WPFactory EAN for WooCommerce plugin, affecting EAN for WooCommerce versions up to 4.8.9. The issue enables Privilege Escalation via Arbitrary Updates to options, with CVSSv3.1 metrics indicating Network attack vector,...

CVE-2024-34370 WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability

Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9...

JVN#85380030: WordPress Plugin "Download Plugins and Themes from Dashboard" vulnerable to path traversal

WordPress Plugin "Download Plugins and Themes from Dashboard" provided by WPFactory LLC contains a path traversal vulnerability CWE-22. Impact The user with "switchthemes" privilege may obtain arbitrary files on the server. Solution Update the plugin Update the plugin to the latest version...

PT-2024-25829 · Wpfactory · Ean For Woocommerce

Name of the Vulnerable Software and Affected Versions: EAN for WooCommerce versions 4.8.9 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in WPFactory EAN for WooCommerce. Recommendations: For versions 4.8.9 and earlier, update to a...

CVE-2024-30536

Cross-Site Request Forgery CSRF vulnerability in WPFactory Slugs Manager.This issue affects Slugs Manager: from n/a through 2.6.7...

CVE-2024-30536

Technical details for CVE-2024-30536 are not provided in the connected documents. No information on affected product/version, root cause, impact, or remediation is available here. Monitor for updates from the referenced sources.

CVE-2024-30536 WordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPFactory Slugs Manager.This issue affects Slugs Manager: from n/a through 2.6.7...

PT-2024-23465 · Wpfactory · Wpfactory Slugs Manager

Name of the Vulnerable Software and Affected Versions: WPFactory Slugs Manager versions 2.6.7 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For WPFactory Slugs Manage...