Lucene search
+L

392 matches found

Patchstack
Patchstack
added 2024/04/15 12:0 a.m.13 views

WordPress Custom Thank You Page Customize For WooCommerce by Binary Carpenter Plugin <= 1.4.12 is vulnerable to Broken Access Control

Software Custom Thank You Page Customize For WooCommerce by Binary Carpenter Type Plugin Vulnerable versions = 1.4.12 Fixed in 1.4.14 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32517 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership...

4.3CVSS6.6AI score0.00337EPSS
SaveExploits0References2Affected Software1
HackRead
HackRead
added 2024/03/14 2:55 p.m.14 views

Microsoft is Opening AI-Powered “Copilot for Security” to Public

By Waqas Microsoft's Copilot for Security will be accessible through a pay-as-you-use licensing model. This is a post from HackRead.com Read the original post: Microsoft is Opening AI-Powered “Copilot for Security” to Public...

7.2AI score
SaveExploits0
OSV
OSV
added 2024/02/27 6:15 a.m.5 views

CVE-2024-1686

The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to missing authorization e in all versions up to, and including, 1.1.2 via the applylayout function due to a missing capability check. This makes it possible for authenticated attackers, with...

6.5CVSS7.4AI score0.00406EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/27 6:15 a.m.25 views

CVE-2024-1687

The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized execution of shortcodes due to a missing capability check on the gettexteditorcontent function in all versions up to, and including, 1.1.2. This makes it possible for authenticat...

5.4CVSS5.7AI score0.00367EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/27 5:33 a.m.28 views

CVE-2024-1687 Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution

The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized execution of shortcodes due to a missing capability check on the gettexteditorcontent function in all versions up to, and including, 1.1.2. This makes it possible for authenticat...

5.4CVSS6AI score0.00367EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/27 5:33 a.m.116 views

CVE-2024-1687

CVE-2024-1687 (Thank You Page Customizer for WooCommerce – Increase Your Sales) is a WordPress plugin vulnerability reported by RH: The issue is unauthorized execution of shortcodes due to a missing capability check on get_text_editor_content() in all versions up to 1.1.2. Root cause: lack of pro...

5.4CVSS6.6AI score0.00367EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/02/27 12:0 a.m.5 views

WordPress Plugin Thank You Page Customizer for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

5.4CVSS6.3AI score0.00367EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/26 12:0 a.m.15 views

PT-2024-18222 · WordPress · The Thank You Page Customizer For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress versions up to, and including, 1.1.2 Description: The issue is related to missing authorization in the plugin, specifically due to a missing capability...

6.5CVSS9.2AI score0.00406EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2024/02/26 12:0 a.m.14 views

WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales Plugin <= 1.1.2 is vulnerable to Broken Access Control

Software Thank You Page Customizer for WooCommerce – Increase Your Sales Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1686 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID...

6.5CVSS6.6AI score0.00406EPSS
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
added 2024/02/14 11:30 a.m.462 views

Exploit for Missing Authorization in Xlplugins Nextmove

CVE-2024-25092 NextMove Lite 2.18.0 - Subscriber+ Arbitra...

8.8CVSS8.5AI score0.01376EPSS
SaveExploits3
Openbugbounty
Openbugbounty
added 2024/01/18 10:14 p.m.8 views

you-cubez.com Cross Site Scripting vulnerability OBB-3838061

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Citrix
Citrix
added 2023/12/27 12:0 a.m.12 views

The status of VDA machine was "Stopped" instead of "Stopped (Deallocated)" on Azure Portal

The following behavior was confirmed for dedicated machines created using Azure on-demand provisioning. - If shutdown the target VM within the OS, the status will be "Stopped" on Azure Portal. If it is "stopped", it will be subject to Azure pay-as-you-go billing. - If the target VM is from the...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/12/18 11:33 a.m.5 views

you-bite.com Improper Access Control vulnerability OBB-3817874

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2023/09/03 12:0 p.m.33 views

How to Remove Your Personal Info From Google by Using Its ‘Results About You’ Tool

You can now set up alerts for whenever your home address, phone number, and email address appears in Search...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/07/12 8:11 p.m.11 views

thankyouforcoming.net Cross Site Scripting vulnerability OBB-3509494

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
NVD
NVD
added 2023/07/10 4:15 p.m.27 views

CVE-2023-24395

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Contact Form 7 Redirect & Thank You Page plugin = 1.0.3 versions...

8.8CVSS6.5AI score0.00312EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/10 10:40 a.m.12 views

CVE-2023-24395 WordPress Contact Form 7 Redirect & Thank You Page Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Contact Form 7 Redirect & Thank You Page plugin = 1.0.3 versions...

5.4CVSS7.1AI score0.00312EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/10 10:40 a.m.38 views

CVE-2023-24395

CVE-2023-24395 affects the WordPress plugin “Scott Paterson Contact Form 7 Redirect & Thank You Page” (≤ 1.0.3). The vulnerability is Cross-Site Request Forgery (CSRF) that could enable unauthorized actions on behalf of an authenticated user. Public sources indicate the issue has been fixed in ve...

8.8CVSS7.1AI score0.00312EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/07/10 12:0 a.m.13 views

Wordpress Plugin Contact Form 7 Redirect & Thank You Page 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS7.7AI score0.00312EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/25 12:15 p.m.8 views

CVE-2022-46810

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales plugin = 1.0.13 versions...

8.8CVSS5.8AI score0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder