103 matches found
CVE-2024-37239
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Branda branda-white-labeling.This issue affects Branda: from n/a through = 3.4.17...
CVE-2024-43117
Cross-Site Request Forgery CSRF vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through = 3.9.1...
CVE-2024-43118
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through = 3.9.1...
CVE-2024-37444
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through = 4.7.1...
CVE-2023-51490
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue affects Defender Security – Malware Scanner, Login Security & Firewall: from n/a through 4.1.0...
CVE-2023-51542
Authentication Bypass by Spoofing vulnerability in WPMU DEV Branda allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Branda: from n/a through 3.4.14...
CVE-2023-47189
Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.2.0...
CVE-2022-44581
Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affects Defender Security: from n/a through 3.3.2...
WordPress Hustle plugin < 7.8.5 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Hustle versions 7.8.5...
CVE-2024-29777
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator.This issue affects Forminator: from n/a through = 1.29.0...
WordPress Hustle Plugin <= 7.8.5 is vulnerable to Broken Access Control
Software Hustle Type Plugin Vulnerable versions = 7.8.5 Fixed in 7.8.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10580 Patch priority Low CVSS severity Low 5.3 Developer WPMU DEV PSID 82d2fb561073 Credits Vijaysimha Reddy vijaysimha Required privileg...
WordPress Branda Plugin <= 3.4.21 is vulnerable to Cross Site Scripting (XSS)
Software Branda Type Plugin Vulnerable versions = 3.4.21 Fixed in 3.4.22 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9371 Patch priority Medium CVSS severity Medium 7.1 Developer WPMU DEV PSID c1cede0cef03 Credits vgo0 Required privilege...
CVE-2024-43118
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through = 3.9.1...
CVE-2024-37444
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through = 4.7.1...
CVE-2024-37444
CVE-2024-37444 – Missing Authorization in Defender Security (WPMU DEV Defender Security) for WordPress allows accessing functionality not constrained by ACLs. Affected: Defender Security through 4.7.1 (WordPress plugin). Mitigation: upgrade to 4.7.2 or later (patch available). CVSS v3.1: 9.8 (AV:...
CVE-2024-43118
CVE-2024-43118 is a Missing Authorization vulnerability in the WordPress plugin Hummingbird (WPMU DEV) caused by incorrectly configured access control. Connected PT Security data identifies the affected software as WPMU DEV Hummingbird versions 3.9.1 and earlier, with a remediation recommended to...
PT-2024-30305 · Wpmu Dev · Wpmu Dev Hummingbird
Name of the Vulnerable Software and Affected Versions: WPMU DEV Hummingbird versions 3.9.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WPMU DEV Hummingbi...
WordPress Forminator Plugin <= 1.36.0 is vulnerable to Insecure Direct Object References (IDOR)
Software Forminator Type Plugin Vulnerable versions = 1.36.0 Fixed in 1.36.1 OWASP Top 10 A3: Injection Classification Insecure Direct Object References IDOR CVE CVE-2024-9700 Patch priority Low CVSS severity Low 5.3 Developer WPMU DEV PSID f94c41be5520 Credits Vijaysimha Reddy vijaysimha Require...
WordPress Broken Link Checker Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)
Software Broken Link Checker Type Plugin Vulnerable versions = 2.4.0 Fixed in 2.4.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8981 Patch priority Medium CVSS severity Medium 7.1 Developer WPMU DEV PSID 5ef9d4c1245b Credits vgo0 Required privile...
