Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2023-44147
Disclosure Date: December 13, 2024 (last updated December 18, 2024)
Missing Authorization vulnerability in Apasionados Comment Blacklist Updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comment Blacklist Updater: from n/a through 1.1.0.
0
Attacker Value
Unknown
CVE-2023-49197
Disclosure Date: December 15, 2023 (last updated December 22, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2.
0
Attacker Value
Unknown
CVE-2022-38061
Disclosure Date: September 22, 2022 (last updated October 08, 2023)
Authenticated (author+) CSV Injection vulnerability in Export Post Info plugin <= 1.2.0 at WordPress.
0
Attacker Value
Unknown
CVE-2022-38068
Disclosure Date: September 08, 2022 (last updated October 08, 2023)
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apasionados Export Post Info plugin <= 1.1.0 at WordPress.
0
Attacker Value
Unknown
CVE-2021-33851
Disclosure Date: March 10, 2022 (last updated October 07, 2023)
A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack. The XSS payload given in the "Custom logo link" executes whenever the user opens the Settings Page of the "Customize Login Image" Plugin.
0
