791
|
6.8 |
MEDIUM
Network
|
cilium
|
cilium
|
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.14.14 and 1.15.8, a race condition in the Cilium agent can cause the agent to ignore lab…
|
CWE-362
Race Condition
|
CVE-2024-42488
|
2024-09-28 03:49 |
2024-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
792
|
6.1 |
MEDIUM
Network
|
wp-unit
|
share_this_image
|
The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link p…
|
CWE-601
Open Redirect
|
CVE-2024-8761
|
2024-09-28 03:41 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
793
|
6.5 |
MEDIUM
Network
|
wp-property-hive
|
propertyhive
|
The PropertyHive plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.19. This is due to missing or incorrect nonce validation on the 'save_accou…
|
CWE-352
Origin Validation Error
|
CVE-2024-8490
|
2024-09-28 03:36 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
794
|
4.8 |
MEDIUM
Network
|
majeedraza
|
carousel_slider
|
The Carousel Slider WordPress plugin before 2.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks eve…
|
CWE-79
Cross-site Scripting
|
CVE-2024-6850
|
2024-09-28 03:30 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
795
|
7.2 |
HIGH
Network
|
nsqua
|
simply_schedule_appointments
|
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.43 does not escape template syntax provided via user input, leading to Twig Template Injec…
|
NVD-CWE-Other
|
CVE-2024-7129
|
2024-09-28 03:26 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
796
|
6.5 |
MEDIUM
Network
|
michalaugustyniak
|
misiek_photo_album
|
The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF checks in some places, which could allow attackers to make logged in users delete arbitrary albums via a CSRF attack
|
CWE-352
Origin Validation Error
|
CVE-2024-7817
|
2024-09-28 03:26 |
2024-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
797
|
4.8 |
MEDIUM
Network
|
wp-master
|
logo_manager_for_enamad
|
The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scri…
|
CWE-79
Cross-site Scripting
|
CVE-2024-5170
|
2024-09-28 03:23 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
798
|
5.4 |
MEDIUM
Network
|
seanschulte
|
vikinghammer_tweet
|
The Vikinghammer Tweet WordPress plugin through 0.2.4 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add…
|
CWE-352
Origin Validation Error
|
CVE-2024-8043
|
2024-09-28 03:22 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
799
|
5.4 |
MEDIUM
Network
|
moc
|
special_feed_items
|
The Special Feed Items WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add…
|
CWE-352
Origin Validation Error
|
CVE-2024-8051
|
2024-09-28 03:19 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
800
|
6.1 |
MEDIUM
Network
|
michalaugustyniak
|
misiek_photo_album
|
The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add…
|
CWE-79
Cross-site Scripting
|
CVE-2024-7818
|
2024-09-28 03:18 |
2024-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|