plugin waiting vulnerabilities and exploits

(subscribe to this query)

5.4

CVSSv3

The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on 'saveLang' functions in versions up to, and including, 0.6.2. This could lead to Cross-Site Scripting due to insufficient input sanitization...

Plugin Waiting

4.3

CVSSv3

The Waiting: One-click countdowns plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.2. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated malicious users to crea...

Plugin Waiting

4.3

CVSSv3

The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on its AJAX calls in versions up to, and including, 0.6.2. This makes it possible for authenticated attackers, with subscriber-level permissions and above...

Plugin Waiting

4.8

CVSSv3

The Waiting: One-click countdowns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown name in versions up to, and including, 0.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with ...

Plugin Waiting

8.8

CVSSv3

The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vulnerability in the pbc_down[meta][id] parameter of the pbc_save_downs action.

Plugin Waiting

4.3

CVSSv3

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework up to and including 3.3.8 for WordPress allows authenticated options changes.

Yithemes Yith Woocommerce Wishlist Yithemes Yith Woocommerce Compare Yithemes Yith Woocommerce Quick View Yithemes Yith Woocommerce Zoom Magnifier Yithemes Yith Woocommerce Ajax Search Yithemes Yith Woocommerce Badge Management Yithemes Yith Woocommerce Brands Add-on Yithemes Yith Woocommerce Request A Quote Yithemes Yith Woocommerce Social Login Yithemes Yith Woocommerce Order Tracking Yithemes Yith Woocommerce Pdf Invoice And Shipping List Yithemes Yith Pre-order For Woocommerce Yithemes Yith Woocommerce Advanced Reviews Yithemes Yith Woocommerce Product Add-ons Yithemes Yith Woocommerce Gift Cards Yithemes Yith Woocommerce Subscription Yithemes Yith Woocommerce Affiliates Yithemes Yith Woocommerce Cart Messages Yithemes Yith Woocommerce Product Bundles Yithemes Yith Woocommerce Frequently Bought Together Yithemes Yith Woocommerce Multi-step Checkout Yithemes Yith Color And Label Variations For Woocommerce

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook