Show filters
43 Total Results
Displaying 41-43 of 43
Sort by:
Attacker Value
Unknown
CVE-2021-24725
Disclosure Date: September 13, 2021 (last updated February 23, 2025)
The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments
0
Attacker Value
Unknown
CVE-2021-24506
Disclosure Date: August 23, 2021 (last updated February 23, 2025)
The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin before 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using it in a SQL statement, allowing users with a role as low as Contributor to perform SQL injection.
0
Attacker Value
Unknown
CVE-2019-13463
Disclosure Date: March 20, 2020 (last updated February 21, 2025)
An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because esc_html is not called for the "echo get_the_title()" or "echo $term->name" statement.
0
