wordpress wordpress 3.0.6 vulnerabilities and exploits

(subscribe to this query)

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 3.0.6 via the get_image function. This makes it possible for unauthenticated malicious users to view a...

Cross-site scripting (XSS) vulnerability in inc/admin/content.php in the Better WP Security (better_wp_security) plugin prior to 3.2.5 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the HTTP_USER_AGENT header.

Bit51 Better-wp-security Bit51 Better-wp-security -Bit51 Better-wp-security 0.1 Bit51 Better-wp-security 0.2 Bit51 Better-wp-security 0.3 Bit51 Better-wp-security 0.4 Bit51 Better-wp-security 0.5 Bit51 Better-wp-security 0.6 Bit51 Better-wp-security 0.7 Bit51 Better-wp-security 0.8 Bit51 Better-wp-security 0.9 Bit51 Better-wp-security 0.10

Multiple cross-site scripting (XSS) vulnerabilities in the Better WP Security (better_wp_security) plugin prior to 3.2.5 for WordPress allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to "server variables," a different ...

Bit51 Better-wp-security Bit51 Better-wp-security -Bit51 Better-wp-security 0.1 Bit51 Better-wp-security 0.2 Bit51 Better-wp-security 0.3 Bit51 Better-wp-security 0.4 Bit51 Better-wp-security 0.5 Bit51 Better-wp-security 0.6 Bit51 Better-wp-security 0.7 Bit51 Better-wp-security 0.8 Bit51 Better-wp-security 0.9 Bit51 Better-wp-security 0.10

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button ID parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

Wpmet Elements Kit Elementor Addons

The Menu Image, Icons made easy WordPress plugin prior to 3.0.6 does not have authorisation and CSRF checks when saving menu settings, and does not validate, sanitise and escape them. As a result, any authenticate users, such as subscriber can update the settings or arbitrary men...

Freshlightlab Menu Image, Icons Made Easy

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

Wpmet Elements Kit Elementor Addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.6 via the render_raw function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute...

Wpmet Elements Kit Elementor Addons

The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 up to and including 3.0.20 for WordPress allow remote malicious users to gain administrator privileges and execute arbitrary code via the opti...

Wpeasycart Wp Easycart 1.1.30 Wpeasycart Wp Easycart 1.1.31 Wpeasycart Wp Easycart 1.1.32 Wpeasycart Wp Easycart 1.1.33 Wpeasycart Wp Easycart 1.1.34 Wpeasycart Wp Easycart 1.1.35 Wpeasycart Wp Easycart 1.1.36 Wpeasycart Wp Easycart 1.2.0 Wpeasycart Wp Easycart 1.2.1 Wpeasycart Wp Easycart 1.2.2 Wpeasycart Wp Easycart 1.2.3 Wpeasycart Wp Easycart 1.2.4

The Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule Gift Cards, and Use Advance Coupons With Personalized Templates plugin for WordPress is vulnerable to unauthor...

Wp Swings Gift Cards For Woocommerce Pro Wpswings Ultimate Gift Cards For Woocommerce – Create Woocommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule Gift Cards, And Use Advance Coupons With Personalized Templates

1 Github repository

« PREV 1 2 3 4 5

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook