Rezultati pretraživanja za 'Proizvođač: wedevs'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-24649 | 9.8 | The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created with, encrypted via wpuf_encryption(). This could allow an attacker havi | 2025-04-30 14:15:23 | 2022-11-21 11:15:12 |
| CVE-2025-32280 | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability in weDevs WP Project Manager allows Cross Site Request Forgery. This issue affects WP Project Manager: from n/a through 2.6.22. | 2025-04-09 16:24:47 | 2025-04-04 16:15:39 |
| CVE-2024-12852 | 6.4 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text' parameter of the Happy Mouse Cursor in all versions up to, and including, 3.15.1 due to insufficient input sanitization and output | 2025-04-03 19:01:48 | 2025-01-08 07:15:27 |
| CVE-2024-13500 | 6.5 | The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.6.17 due to | 2025-02-24 12:33:48 | 2025-02-15 12:15:30 |
| CVE-2024-13752 | 6.5 | The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the '/pm/v2/settings/notice' endpoint all | 2025-02-24 12:30:24 | 2025-02-15 10:15:08 |
| CVE-2024-6627 | 6.4 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's PDF View widget in all versions up to, and including, 3.11.2 due to insufficient input sanitization and output escaping on user supplied | 2025-02-06 17:40:50 | 2024-07-27 12:15:11 |
| CVE-2024-10520 | 5.3 | The WP Project Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'check' method of the 'Create_Milestone', 'Create_Task_List', 'Create_Task', and 'Delete_Task' classes in version | 2025-02-05 16:51:57 | 2024-11-20 12:15:18 |
| CVE-2024-12195 | 6.5 | The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to SQL Injection via the 'project_id' parameter of the /wp-json/pm/v2/projects/2/task-lists REST API endpoin | 2025-02-05 16:50:05 | 2025-01-04 12:15:22 |
| CVE-2024-10548 | 6.5 | The WP Project Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.15 via the Project Task List ('/wp-json/pm/v2/projects/1/task-lists') REST API endpoint. This makes it possible for | 2025-02-05 16:49:13 | 2024-12-19 02:15:22 |
| CVE-2024-10174 | 7.3 | The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.6.13 via the 'Abstract_Permissio | 2025-02-05 16:48:14 | 2024-11-13 04:15:03 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/7
Zapisa po stranici: