| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-24554 | 6.5 | The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue | 2023-11-07 03:31:00 | 2021-08-23 12:15:00 |
| CVE-2021-24531 | 3.5 | The Charitable – Donation Plugin WordPress plugin before 1.6.51 is affected by an authenticated stored cross-site scripting vulnerability which was found in the add donation feature. | 2023-11-07 03:31:00 | 2021-08-23 12:15:00 |
| CVE-2021-24529 | 3.5 | The Grid Gallery – Photo Image Grid Gallery WordPress plugin before 1.2.5 does not properly sanitize the title field for image galleries when adding them via the admin dashboard, resulting in an authenticated Stored Cross-Site Scripting vulnerability | 2023-11-07 03:31:00 | 2021-08-23 12:15:00 |
| CVE-2021-24524 | 3.5 | The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing high privilege users to use Cross-Site Scripting payloads in them. | 2023-11-07 03:31:00 | 2021-08-23 12:15:00 |
| CVE-2021-24486 | 3.5 | The Simple Social Media Share Buttons – Social Sharing for Everyone WordPress plugin before 3.2.3 did not escape the align and like_button_size parameters of its SSB shortcode, which could allow users with a role as low as Contributor to perform Stor | 2023-11-07 03:31:00 | 2021-08-23 12:15:00 |
| CVE-2021-25218 | 5.0 | In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vu | 2023-11-07 03:31:00 | 2021-08-18 19:15:00 |
| CVE-2021-24527 | 10.0 | The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthe | 2023-11-07 03:31:00 | 2021-08-16 11:15:00 |
| CVE-2021-24526 | 3.5 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin before 1.13.60 does not escape its Form Title before outputting it in an attribute when editing a form in the admin dashboard, leading to an authenticated Sto | 2023-11-07 03:31:00 | 2021-08-16 11:15:00 |
| CVE-2021-24410 | 4.3 | The ?????? ?????? ??????? WordPress plugin through 1.0 is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when outputting them back in the page. This could allow attackers to make a logged in admin chang | 2023-11-07 03:31:00 | 2021-08-16 11:15:00 |
| CVE-2021-24363 | 4.0 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images/SVG anywhere in the filesystem via a path tra | 2023-11-07 03:31:00 | 2021-08-16 11:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: