| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-25096 | 6.4 | The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL | 2022-02-10 22:07:00 | 2022-02-07 16:15:00 |
| CVE-2021-25103 | 2.6 | The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in the url_addon/gtranslate-email.php file before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue. | 2022-02-10 21:34:00 | 2022-02-07 16:15:00 |
| CVE-2021-25106 | 3.5 | The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1 does not check for authorisation and has a flawed CSRF logic when saving its settings, allowing any authenticated users, such as | 2022-02-10 21:24:00 | 2022-02-07 16:15:00 |
| CVE-2021-24880 | 3.5 | The SupportCandy WordPress plugin before 2.2.7 does not validate and escape the page attribute of its shortcode, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks | 2022-02-10 21:07:00 | 2022-02-07 16:15:00 |
| CVE-2021-46389 | 5.0 | IIPImage High Resolution Streaming Image Server prior to commit 882925b295a80ec992063deffc2a3b0d803c3195 is affected by an integer overflow in iipsrv.fcgi through malformed HTTP query parameters. | 2022-02-10 21:02:00 | 2022-02-07 14:15:00 |
| CVE-2021-25105 | 3.5 | The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. | 2022-02-10 20:52:00 | 2022-02-07 16:15:00 |
| CVE-2022-0148 | 3.5 | The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page. | 2022-02-10 20:48:00 | 2022-02-07 16:16:00 |
| CVE-2021-25114 | 7.5 | The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection | 2022-02-10 20:39:00 | 2022-02-07 16:15:00 |
| CVE-2021-24843 | 4.3 | The SupportCandy WordPress plugin before 2.2.7 does not have CRSF check in its wpsc_tickets AJAX action, which could allow attackers to make a logged in admin call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_act | 2022-02-10 20:33:00 | 2022-02-07 16:15:00 |
| CVE-2021-46359 | 5.0 | FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks. | 2022-02-10 20:32:00 | 2022-02-07 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: