Show filters
292 Total Results
Displaying 151-160 of 292
Sort by:
Attacker Value
Unknown
CVE-2012-10016
Disclosure Date: October 17, 2023 (last updated February 25, 2025)
A vulnerability classified as problematic has been found in Halulu simple-download-button-shortcode Plugin 1.0 on WordPress. Affected is an unknown function of the file simple-download-button_dl.php of the component Download Handler. The manipulation of the argument file leads to information disclosure. It is possible to launch the attack remotely. Upgrading to version 1.1 is able to address this issue. The patch is identified as e648a8706818297cf02a665ae0bae1c069dea5f1. It is recommended to upgrade the affected component. VDB-242190 is the identifier assigned to this vulnerability.
0
Attacker Value
Unknown
CVE-2023-44987
Disclosure Date: October 16, 2023 (last updated February 25, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Timely - Appointment software Timely Booking Button plugin <= 2.0.2 versions.
0
Attacker Value
Unknown
CVE-2023-41131
Disclosure Date: October 12, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.10 versions.
0
Attacker Value
Unknown
CVE-2023-40199
Disclosure Date: October 03, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab WP Like Button plugin <= 1.7.0 versions.
0
Attacker Value
Unknown
CVE-2023-41733
Disclosure Date: October 02, 2023 (last updated February 25, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in YYDevelopment Back To The Top Button plugin <= 2.1.5 versions.
0
Attacker Value
Unknown
CVE-2023-41238
Disclosure Date: September 27, 2023 (last updated February 25, 2025)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.3 versions.
0
Attacker Value
Unknown
CVE-2023-39991
Disclosure Date: September 04, 2023 (last updated February 25, 2025)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Blindside Networks BigBlueButton plugin <= 3.0.0-beta.4 versions.
0
Attacker Value
Unknown
CVE-2023-24401
Disclosure Date: August 30, 2023 (last updated February 25, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Davidsword Mobile Call Now & Map Buttons plugin <= 1.5.0 versions.
0
Attacker Value
Unknown
CVE-2023-40735
Disclosure Date: August 21, 2023 (last updated February 25, 2025)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON (Architecture flaw) allows loss of plausible deniability and confidentiality.This issue affects BUTTERFLY BUTTON: As of 2023-08-21.
0
Attacker Value
Unknown
CVE-2023-2254
Disclosure Date: August 16, 2023 (last updated February 25, 2025)
The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks even when the unfiltered_html capability is disallowed (for example in multisite setup), and we consider it a low risk.
0
