77 matches found
CVE-2024-32684
CVE-2024-32684 is a Missing Authorization vulnerability in the WordPress plugin “WP Ultimate Review.” The vulnerability affects WP Ultimate Review versions 2.2.5 and earlier (per the CVE entry: “from n/a through 2.2.5”). Public records in the initial document indicate a high-severity impact with ...
CVE-2024-32683
Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5...
CVE-2024-32683
Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5...
CVE-2024-32683
CVE-2024-32683 targets the WP Ultimate Review WordPress plugin. Connected sources describe an unauthenticated bypass via a user-controlled key/ID, enabling direct object reference and potentially bypassing review restrictions in versions up to 2.2.5. Public advisories (RH) label it as an Authoriz...
CVE-2024-32505
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite: from n/a through = 3.0.6...
CVE-2024-32505
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet Elements kit Elementor addons allows Stored XSS.This issue affects Elements kit Elementor addons: from n/a through 3.0.6...
CVE-2024-32505
CVE-2024-32505 affects the WordPress ElementsKit Elementor addons plugin (versions
PT-2024-24622 · Unknown · Wpmet Elements Kit Elementor Addons
Name of the Vulnerable Software and Affected Versions: Wpmet Elements kit Elementor addons versions 3.0.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means an attack...
WordPress Elements kit Elementor addons Plugin <= 3.0.6 is vulnerable to Local File Inclusion
Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.6 Fixed in 3.0.7 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-2047 Patch priority Low CVSS severity Low 8.5 Developer Wpmet PSID 9c94438e55c2 Credits wesley wcraft Required privilege...
WordPress Elements kit Elementor addons Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)
Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.4 Fixed in 3.0.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1239 Patch priority Low CVSS severity Low 6.5 Developer Wpmet PSID def03a5e89bb Credits RandomRoot Required...
WordPress Elements kit Elementor addons Plugin <= 3.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.3 Fixed in 3.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6525 Patch priority Low CVSS severity Low 6.5 Developer Wpmet PSID 35435cff32ec Credits Ulyses Saicha Requir...
CVE-2022-47160
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register Social Counter.This issue affects Wp Social Login and Register Social Counter: from n/a through 1.9.0...
Code injection
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register Social Counter.This issue affects Wp Social Login and Register Social Counter: from n/a through 1.9.0...
CVE-2022-47160
The CVE-2022-47160 entry describes an exposure of sensitive information to an unauthorized actor affecting the WordPress plugin Wp Social Login and Register Social Counter (WP Social). Affected component: the WP Social plugin; vulnerable version range: up to 1.9.0 (from n/a through 1.9.0). Root c...
CVE-2023-28987
Cross-Site Request Forgery CSRF vulnerability in Wpmet Wp Ultimate Review plugin = 2.0.3 versions...
CVE-2023-28987
Cross-Site Request Forgery CSRF vulnerability in Wpmet Wp Ultimate Review plugin = 2.0.3 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Wpmet Wp Ultimate Review plugin = 2.0.3 versions...
CVE-2023-28987
CVE-2023-28987 is a CSRF vulnerability in the WordPress plugin Wp Ultimate Review (Wpmet Wp Ultimate Review) affecting versions <= 2.0.3. The issue allows an attacker to perform unintended actions on behalf of an authenticated or unauthenticated user, depending on context, due to CSRF flaws de...