Rezultati pretraživanja za 'Od datuma: 24.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-41882 | - | Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can cause a stack overflow by entering large data into URL parameters, which will result in a system reboot. The manufacturer has rel | 2024-12-24 06:15:33 | 2024-12-24 06:15:33 |
| CVE-2024-12622 | 6.4 | The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_cart_button' and 'wp_cart_display_product' shortcodes in all versions up to, and including, 5.0.7 due to insufficient input sani | 2024-12-24 06:15:33 | 2024-12-24 06:15:33 |
| CVE-2024-12594 | 8.8 | The Custom Login Page Styler – Login Protected Private Site , Change wp-admin login url , WordPress login logo , Temporary admin login access , Rename login , Login customizer, Hide wp-login – Limit Login Attempts – Locked Site plugin for WordPress i | 2024-12-24 06:15:33 | 2024-12-24 06:15:33 |
| CVE-2024-12405 | 6.1 | The Export Customers Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 't' parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for un | 2024-12-24 06:15:33 | 2024-12-24 06:15:33 |
| CVE-2024-12210 | 4.3 | The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcdn_remove_shoplogo' AJAX action in all versions up to, and including, 5.4.0. This m | 2024-12-24 06:15:32 | 2024-12-24 06:15:32 |
| CVE-2024-12100 | 6.1 | The Bitcoin Lightning Publisher for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.1. This makes it poss | 2024-12-24 06:15:32 | 2024-12-24 06:15:32 |
| CVE-2024-12034 | 5.3 | The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for u | 2024-12-24 06:15:32 | 2024-12-24 06:15:32 |
| CVE-2024-11885 | 6.4 | The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'njtele_button shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user s | 2024-12-24 06:15:32 | 2024-12-24 06:15:32 |
| CVE-2024-12710 | 6.1 | The WP-Appbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic | 2024-12-24 05:15:07 | 2024-12-24 05:15:07 |
| CVE-2024-12617 | 5.4 | The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with | 2024-12-24 05:15:07 | 2024-12-24 05:15:07 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12254
Zapisa po stranici: