Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
infornweb vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2022-4749
The Posts List Designer by Category WordPress plugin prior to 3.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which ...
Infornweb Posts List Designer
5.4
CVSSv3
CVE-2022-4792
The News & Blog Designer Pack WordPress plugin prior to 3.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
Infornweb News \\& Blog Designer Pack
9.8
CVSSv3
CVE-2023-5815
The News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post Masonry) plugin for WordPress is vulnerable to Remote Code Execution via Local File Inclusion in all versions up to, and incl...
Infornweb News \\& Blog Designer Pack
1 Github repository
5.4
CVSSv3
CVE-2024-23502
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in InfornWeb Posts List Designer by Category – List Category Posts Or Recent Posts allows Stored XSS.This issue affects Posts List Designer by Category – List ...
Infornweb Posts List Designer By Category
5.4
CVSSv3
CVE-2021-24729
The Logo Showcase with Slick Slider WordPress plugin prior to 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata of Grid logo showcase.
Infornweb Logo Showcase With Slick Slider
4.3
CVSSv3
CVE-2021-24730
The Logo Showcase with Slick Slider WordPress plugin prior to 1.2.5 does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as Subscriber, to change title, description, alt text, and URL of arbitrary upload...
Infornweb Logo Showcase With Slick Slider
4.3
CVSSv3
CVE-2021-24913
The Logo Showcase with Slick Slider WordPress plugin prior to 2.0.1 does not have CSRF check in the lswss_save_attachment_data AJAX action, allowing malicious users to make a logged in high privilege user, change title, description, alt text, and URL of arbitrary uploaded media.
Infornweb Logo Showcase With Slick Slider
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977
IMAP
local users
CVE-2024-32038
CVE-2023-49963
CVE-2023-22869
CVE-2024-31497
local
CVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started