This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingNovember 21, 2022
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingNovember 21, 2022
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingNovember 21, 2022
The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information in its log files (which are publicly accessible), including DeepL API key.Read More ...
Continue ReadingNovember 21, 2022
The function check_is_login_page() uses headers for the IP check, which can be easily spoofed.Read More ...
Continue ReadingNovember 21, 2022
The Popup Maker WordPress plugin before 1.16.11 does not sanitise and escape some of its Popup options, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting atta ...
Continue ReadingNovember 21, 2022
The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.Read More ...
Continue ReadingNovember 21, 2022
The Evaluate WordPress plugin through 1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even w ...
Continue ReadingNovember 21, 2022
Back to Main