Rezultati pretraživanja za 'Proizvođač: zemanta'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-0592 | 5.4 | The Related Posts for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the handle_create_link() function. This makes it pos | 2025-03-11 16:36:50 | 2024-03-13 16:15:12 |
| CVE-2021-24482 | 3.5 | The Related Posts for WordPress plugin through 2.0.4 does not sanitise its heading_text and CSS settings, allowing high privilege users (admin) to set XSS payloads in them, leading to Stored Cross-Site Scripting issues. | 2023-11-07 03:31:00 | 2021-07-19 11:15:00 |
| CVE-2022-3506 | 5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3. | 2023-03-06 20:56:00 | 2022-10-14 14:15:00 |
| CVE-2021-24180 | 3.5 | Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting (XSS) vulnerability within the 'lang' GET parameter while editing a post, triggered when users with the | 2021-04-09 15:54:00 | 2021-04-05 19:15:00 |
| CVE-2015-9361 | 4.3 | The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg(). | 2019-08-30 15:28:00 | 2019-08-28 12:15:00 |
| CVE-2017-18571 | 7.5 | The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316. | 2019-08-26 16:32:00 | 2019-08-22 13:15:00 |
| CVE-2016-10917 | 7.5 | The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316. | 2019-08-26 13:23:00 | 2019-08-22 13:15:00 |
| CVE-2013-3476 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors. | 2017-08-29 01:33:00 | 2014-06-02 15:55:00 |
| CVE-2013-3257 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors. | 2017-08-29 01:33:00 | 2014-06-02 15:55:00 |
| CVE-2013-3477 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors. | 2017-08-29 01:33:00 | 2014-05-27 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: