CVE Vulnerability Catalog

A cross-site request forgery (CSRF) vulnerability has been discovered in User-Management-PHP-MYSQL (up to commit fedcf58797bf2791591606f7b61fdad99ad8bff1). The vulnerability affects unknown code and can be exploited remotely. The exploit has been publicly released and may be used by attackers.

A vulnerability was identified in ajayrandhawa User-Management-PHP-MYSQL up to fedcf58797bf2791591606f7b61fdad99ad8bff1. It affects an unknown part of the file /admin/edit-user.php of the User Management Interface. Manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely and the exploit is publicly available.

W repozytorium langchain-ai/langchain występuje podatność na wstrzykiwanie SQL, szczególnie w implementacji SQLite w LangGraph. Problem dotyczy wersji langgraph-checkpoint-sqlite 2.0.10 i wynika z niewłaściwego przetwarzania operatorów filtrów, co umożliwia atakującym wstrzykiwanie dowolnego SQL.

An unauthenticated reflected Cross-Site Scripting (XSS) vulnerability was discovered in VirtueMart versions 1.0.0 to 4.4.10 for Joomla. The vulnerability allows execution of malicious JavaScript in the user's browser.

The The7 — Website and eCommerce Builder for WordPress theme is vulnerable to Stored Cross-Site Scripting via the 'the7_fancy_title_css' parameter in all versions up to, and including, 12.9.1. Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access or higher to inject arbitrary web scripts.

Wtyczka Stripe Payment Forms od WP Full Pay, służąca do akceptacji płatności kartą kredytową, darowizn i subskrypcji w WordPressie, jest podatna na atak typu SQL Injection poprzez parametr 'wpfs-form-name' we wszystkich wersjach do i włącznie z 8.3.1. Problem wynika z niewystarczającego zabezpieczenia dostarczonego przez użytkownika oraz braku odpowiedniego przygotowania istniejącego zapytania SQL.

A vulnerability in the Discussion Board – WordPress Forum Plugin up to version 2.5.5. It allows arbitrary shortcode execution due to improper validation before running do_shortcode. Authenticated attackers with Subscriber-level access and above can exploit this.

Wtyczka Product Filter by WBW dla WordPressa jest podatna na atak typu SQL Injection poprzez parametr 'filtersDataBackend' we wszystkich wersjach do i włącznie z 2.9.7. Problem wynika z niewystarczającego zabezpieczenia parametru dostarczonego przez użytkownika oraz braku odpowiedniego przygotowania istniejącego zapytania SQL.

Wtyczka wpForo Forum dla WordPressa jest podatna na ataki typu SQL Injection, zarówno oparte na błędach, jak i czasie, poprzez funkcję get_members() we wszystkich wersjach do 2.4.8 włącznie. Problem wynika z braku walidacji całkowitych wartości dla parametrów 'offset' i 'row_count'.

The Fast Velocity Minify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The FuseWP – WordPress User Sync to Email List & Marketing Automation plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.23.0. This is due to missing or incorrect nonce validation on the save_changes function. This makes it possible for unauthenticated attackers to add or edit sync rules via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

The Charitable – Donation Plugin for WordPress is vulnerable to SQL Injection via the donation_ids parameter in all versions up to, and including, 1.8.8.4 due to insufficient escaping and lack of preparation on the SQL query. This allows authenticated attackers with Subscriber-level access and above to append additional SQL queries to extract sensitive information. Exploitation requires a paid donation.

The SpendeOnline.org plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spendeonline' shortcode in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping on user supplied attributes.

The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6. This is due to missing or incorrect nonce validation on the aDBc_prepare_elements_to_clean() function.

The Password Policy Manager | Password Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'moppm_ajax' AJAX endpoint in all versions up to and including 2.0.5. This allows authenticated attackers with Subscriber-level access or higher to log out the site's connection to miniorange.

The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagram profile and media data from any account the site owner connected to their site.

The Widget Options – The #1 WordPress Widget & Block Control Plugin is vulnerable to Stored Cross-Site Scripting via multiple functions in all versions up to, and including, 4.1.2. Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access or higher to inject arbitrary web scripts.

Wtyczka Directorist: AI-Powered Business Directory Plugin z ogłoszeniami klasyfikowanymi dla WordPressa jest podatna na nieautoryzowane przenoszenie plików z powodu niewystarczającej walidacji ścieżek plików w akcji AJAX add_listing_action we wszystkich wersjach do 8.4.8 włącznie. Umożliwia to nieautoryzowanym atakującym przenoszenie dowolnych plików na serwerze.

The WordPress Testimonial Carousel For Elementor plugin (versions up to 11.6.2) is vulnerable to stored cross-site scripting (XSS) via multiple parameters due to insufficient input sanitization and output escaping. An authenticated attacker with Contributor-level access or above can inject arbitrary scripts into pages.

The Gutenberg Blocks – PublishPress Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Marker Title' and 'Marker Description' parameters for the Maps block in versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping.