1491
|
4.8 |
MEDIUM
Network
|
wp-master
|
logo_manager_for_enamad
|
The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scri…
|
CWE-79
Cross-site Scripting
|
CVE-2024-5170
|
2024-09-28 03:23 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1492
|
5.4 |
MEDIUM
Network
|
seanschulte
|
vikinghammer_tweet
|
The Vikinghammer Tweet WordPress plugin through 0.2.4 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add…
|
CWE-352
Origin Validation Error
|
CVE-2024-8043
|
2024-09-28 03:22 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1493
|
5.4 |
MEDIUM
Network
|
moc
|
special_feed_items
|
The Special Feed Items WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add…
|
CWE-352
Origin Validation Error
|
CVE-2024-8051
|
2024-09-28 03:19 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1494
|
6.1 |
MEDIUM
Network
|
michalaugustyniak
|
misiek_photo_album
|
The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add…
|
CWE-79
Cross-site Scripting
|
CVE-2024-7818
|
2024-09-28 03:18 |
2024-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1495
|
5.4 |
MEDIUM
Network
|
alaingonzalez
|
accordion_image_menu
|
The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin a…
|
CWE-352
Origin Validation Error
|
CVE-2024-8092
|
2024-09-28 03:17 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1496
|
6.5 |
MEDIUM
Network
|
jakesnyder
|
enhanced_search_box
|
The Enhanced Search Box WordPress plugin through 0.6.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
|
CWE-352
Origin Validation Error
|
CVE-2024-8091
|
2024-09-28 03:17 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1497
|
4.3 |
MEDIUM
Network
|
github
|
enterprise_server
|
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public repository. This was …
|
CWE-863
Incorrect Authorization
|
CVE-2024-7711
|
2024-09-28 03:17 |
2024-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1498
|
6.5 |
MEDIUM
Network
|
lucasgarcia
|
posts_reminder
|
The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
|
CWE-352
Origin Validation Error
|
CVE-2024-8093
|
2024-09-28 03:16 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1499
|
7.5 |
HIGH
Network
juniper
|
junos junos_os_evolved
|
An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial o…
|
CWE-20
Improper Input Validation
|
CVE-2023-4481
|
2024-09-28 03:15 |
2023-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
1500
|
6.5 |
MEDIUM
Network
|
elliot
|
ilc_thickbox
|
The ILC Thickbox WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
|
CWE-352
Origin Validation Error
|
CVE-2024-7820
|
2024-09-28 03:08 |
2024-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|