Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 24.12.2024.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2024-12617 5.4 The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with 2024-12-24 05:15:07
CVE-2024-12518 6.4 The ShMapper by Teplitsa plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shmMap' shortcode in all versions up to, and including, 1.4.18 due to insufficient input sanitization and output escaping on user supplied at 2024-12-24 05:15:06
CVE-2024-12507 6.4 The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied at 2024-12-24 05:15:06
CVE-2024-12266 6.5 The ELEX WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the elex_dp_export_rules() and elex_dp_import_rules() functions in all versions up to, and inclu 2024-12-24 05:15:06
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/12397
Zapisa po stranici: