admin menu editor vulnerabilities and exploits

(subscribe to this query)

The Admin Menu Editor WordPress plugin up to and including 1.0.4 does not sanitize and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

Unknown Admin Menu Editor Admin Menu Editor Project Admin Menu Editor

Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor.This issue affects Admin Menu Editor: from n/a up to and including 1.12.

W-shadow Admin Menu Editor

File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote malicious users to run arbitrary code via File Manager/Editor component in the vendor or admin menu.

Cs-cart Cs-cart Multivendor Cs-cart Cs-cart Multivendor 4.16.1

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in...

Paretodigital Yasr – Yet Another Star Rating Plugin For Wordpress Nicheaddons Events Addon For Elementor Dots Fraud Prevention For Woocommerce And Edd Wpengine Gutenberg Blocks – Acf Blocks Suite Bouncingsprout Ultimeter Toddhalfpenny Past Events Extension Pootlepress Pootle Pagebuilder – Wordpress Page Builder Powerfulwp Local Delivery Drivers For Woocommerce Kkikuchi1220 Ultimate Gutenberg – Custom Block Templates Josevega Wp Required Taxonomies – Categories And Tags Mandatory Pmbaldha Featured Products First For Woocommerce – A Extension Of Woocommerce (woocommerce Addon Plugin)Sslzen Ssl Certificate – Free Ssl, Https By Ssl Zen

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Jquery Jquery Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Drupal Drupal Backdropcms Backdrop Fedoraproject Fedora 28 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Opensuse Backports Sle 15.0 Opensuse Leap 15.1 Netapp Oncommand System Manager

488 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook