Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2024-38690

Disclosure Date: November 01, 2024 (last updated November 02, 2024)
Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.3.
0
Attacker Value
Unknown

CVE-2024-32779

Disclosure Date: June 09, 2024 (last updated June 10, 2024)
Missing Authorization vulnerability in Avirtum Vision Interactive.This issue affects Vision Interactive: from n/a through 1.7.1.
0
Attacker Value
Unknown

CVE-2024-33941

Disclosure Date: May 03, 2024 (last updated May 03, 2024)
Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.1.
0
Attacker Value
Unknown

CVE-2023-46823

Disclosure Date: November 06, 2023 (last updated November 15, 2023)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum ImageLinks Interactive Image Builder for WordPress allows SQL Injection.This issue affects ImageLinks Interactive Image Builder for WordPress: from n/a through 1.5.4.
Attacker Value
Unknown

CVE-2023-41949

Disclosure Date: September 25, 2023 (last updated October 08, 2023)
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Avirtum iFolders plugin <= 1.5.0 versions.
Attacker Value
Unknown

CVE-2022-4393

Disclosure Date: January 09, 2023 (last updated November 14, 2023)
The ImageLinks Interactive Image Builder for WordPress plugin through 1.5.3 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.