49 matches found
CVE-2024-56265
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.9...
CVE-2024-47369
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpweb Social Auto Poster social-auto-poster allows Reflected XSS.This issue affects Social Auto Poster: from n/a through = 5.3.15...
CVE-2024-56265
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPWeb WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.9...
CVE-2024-56265
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.9...
CVE-2024-56265: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.9...
CVE-2024-54383: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Privilege Escalation.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.9...
CVE-2024-39650
Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4...
CVE-2024-39650
Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4...
CVE-2024-39650: Missing Authorization
Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4...
CVE-2024-49272
Cross-Site Request Forgery CSRF vulnerability in wpweb Social Auto Poster social-auto-poster allows Cross Site Request Forgery.This issue affects Social Auto Poster: from n/a through = 5.3.15...
CVE-2024-49272
CVE-2024-49272 : A CSRF vulnerability exists in the WordPress plugin Social Auto Poster (WPWeb Social Auto Poster) that allows unauthorized actions to be performed on behalf of a user. Affected versions are listed as n/a through 5.3.15. The issue has a patch available: update to version 5.3.16 or...
CVE-2024-49272: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in wpweb Social Auto Poster social-auto-poster allows Cross Site Request Forgery.This issue affects Social Auto Poster: from n/a through = 5.3.15...
CVE-2024-47369
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpweb Social Auto Poster social-auto-poster allows Reflected XSS.This issue affects Social Auto Poster: from n/a through = 5.3.15...
CVE-2024-47369: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpweb Social Auto Poster social-auto-poster allows Reflected XSS.This issue affects Social Auto Poster: from n/a through = 5.3.15...
CVE-2024-43132
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPWeb Elite Docket WooCommerce Collections / Wishlist / Watchlist allows SQL Injection.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...
CVE-2024-43132
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPWeb Elite Docket WooCommerce Collections / Wishlist / Watchlist allows SQL Injection.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...
CVE-2024-43132
CVE-2024-43132: Unauthenticated SQL Injection in WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) prior to v1.7.0 due to improper neutralization of inputs. Exploitation details are not provided in the initial doc, but Wordfence notes the issue was patched in version 1.7.0. Affe...
CVE-2024-43132: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPWeb Elite Docket WooCommerce Collections / Wishlist / Watchlist allows SQL Injection.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...
CVE-2024-43131
Incorrect Authorization vulnerability in WPWeb Docket WooCommerce Collections / Wishlist / Watchlist allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...
CVE-2024-39651
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...