Show filters
91 Total Results
Displaying 21-30 of 91
Sort by:
Attacker Value
Unknown

CVE-2023-34379

Disclosure Date: January 17, 2024 (last updated February 26, 2025)
Missing Authorization vulnerability in MagneticOne Cart2Cart: Magento to WooCommerce Migration.This issue affects Cart2Cart: Magento to WooCommerce Migration: from n/a through 2.0.0.
Attacker Value
Unknown

CVE-2023-6061

Disclosure Date: December 08, 2023 (last updated December 18, 2024)
Rejected reason: This CVE ID has been rejected/withdrawn by its CVE Numbering Authority (Palo Alto Networks) based on discussions with Mitsubishi Electronics Corporation's PSIRT.
0
Attacker Value
Unknown

CVE-2023-41800

Disclosure Date: October 02, 2023 (last updated February 25, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin <= 1.4.2 versions.
Attacker Value
Unknown

CVE-2023-30751

Disclosure Date: August 14, 2023 (last updated February 25, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in iControlWP Article Directory Redux plugin <= 1.0.2 versions.
Attacker Value
Unknown

CVE-2023-25036

Disclosure Date: July 18, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in akhlesh-nagar, a.Ankit Social Media Icons Widget plugin <= 1.6 versions.
Attacker Value
Unknown

CVE-2015-10116

Disclosure Date: June 06, 2023 (last updated February 25, 2025)
A vulnerability classified as problematic has been found in RealFaviconGenerator Favicon Plugin up to 1.2.12 on WordPress. This affects the function install_new_favicon of the file admin/class-favicon-by-realfavicongenerator-admin.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.2.13 is able to address this issue. The identifier of the patch is 949a1ae7216216350458844f50a72f100b56d4e7. It is recommended to upgrade the affected component. The identifier VDB-230661 was assigned to this vulnerability.
Attacker Value
Unknown

CVE-2023-31584

Disclosure Date: May 22, 2023 (last updated February 25, 2025)
GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the User Input field.
Attacker Value
Unknown

CVE-2023-24374

Disclosure Date: April 06, 2023 (last updated February 24, 2025)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 versions.
Attacker Value
Unknown

CVE-2023-24382

Disclosure Date: February 14, 2023 (last updated February 24, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 versions.
Attacker Value
Unknown

CVE-2015-10025

Disclosure Date: January 07, 2023 (last updated February 24, 2025)
A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file miniConf/MessageView.cs of the component URL Scanning. The manipulation leads to denial of service. Upgrading to version 1.7.7 and 1.8.0 is able to address this issue. The patch is named c06c2e5116c306e4e1bc79779f0eda2d1182f655. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217615.