Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 Easy Form Builder Plugin up to 1.0 on WordPress AJAX Action EFBP_verify_upload_file unrestricted upload
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 Easy Form Builder Plugin up to 1.0 on WordPress AJAX Action EFBP_verify_upload_file unrestricted upload


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability, which was classified as critical, has been found in Easy Form Builder Plugin up to 1.0 on WordPress (WordPress Plugin). This issue affects the function EFBP_verify_upload_file of the component AJAX Action Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product. ...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 Easy Form Builder Plugin up to 1.0 on WordPress AJAX Action EFBP_verify_upload_file unrestricted upload


📈 116.61 Punkte

📌 CVE-2023-32517 | PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder Plugin redirect


📈 57.42 Punkte

📌 Webdorado Contact Form Builder Plugin up to 1.0.68 on WordPress wp-admin/admin-ajax.php $_GET['action'] cross site request forgery


📈 51.27 Punkte

📌 CVE-2022-1952 | Free Booking Plugin for Hotels, Restaurant and Car Rental Plugin AJAX Action unrestricted upload


📈 49.16 Punkte

📌 External Media Plugin up to 1.0.33 on WordPress AJAX Action unrestricted upload


📈 48.8 Punkte

📌 CVE-2022-3912 | User Registration Plugin up to 2.2.4.0 on WordPress AJAX Action unrestricted upload


📈 48.8 Punkte

📌 CVE-2022-3989 | Motors Plugin up to 1.4.3 on WordPress AJAX Action unrestricted upload


📈 48.8 Punkte

📌 N5 Upload Form Plugin up to 1.0 on WordPress unrestricted upload


📈 44.7 Punkte

📌 ultimate-form-builder-lite Plugin up to 1.3.6 on WordPress wp-admin/admin-ajax.php sql injection


📈 43.31 Punkte

📌 ultimate-form-builder-lite Plugin bis 1.3.6 auf WordPress wp-admin/admin-ajax.php SQL Injection


📈 43.31 Punkte

📌 CVE-2015-5681 | Powerplay Gallery Plugin 3.3 on WordPress File Upload upload.php unrestricted upload (ID 132671)


📈 42.2 Punkte

📌 WPBakery Page Builder Clipboard Plugin up to 4.5.5 on WordPress AJAX Action cross site scripting


📈 41.77 Punkte

📌 WPBakery Page Builder Clipboard Plugin up to 4.5.7 on WordPress AJAX Action authorization


📈 41.77 Punkte

📌 Low CVE-2020-13423: Form builder for magento 2 project Form builder for magento 2


📈 41.13 Punkte

📌 CVE-2023-0477 | Auto Featured Image Plugin prior 3.9.16 on WordPress AJAX Endpoint unrestricted upload


📈 40.84 Punkte

📌 Easy Contact Form Solution Plugin up to 1.6 on WordPress wp-admin/admin-ajax.php value cross site scripting


📈 40.54 Punkte

📌 Easy Contact Form Solution Plugin bis 1.6 auf WordPress wp-admin/admin-ajax.php value Cross Site Scripting


📈 40.54 Punkte

📌 Webdorado Contact Form Plugin up to 1.13.4 on WordPress wp-admin/admin-ajax.php action cross site request forgery


📈 40.21 Punkte

📌 10Web Form Maker Plugin up to 1.13.4 on WordPress wp-admin/admin-ajax.php action cross site request forgery


📈 40.21 Punkte

📌 Redirection for Contact Form 7 Plugin up to 2.3.3 on WordPress AJAX Action delete_action_post authorization


📈 40.21 Punkte

📌 Redirection for Contact Form 7 Plugin up to 2.3.3 on WordPress AJAX Action import_from_debug authorization


📈 40.21 Punkte

📌 Redirection for Contact Form 7 Plugin up to 2.3.3 on WordPress AJAX Action wpcf7r_get_nonce authorization


📈 40.21 Punkte

📌 CVE-2023-45070 | 10Web Form Builder Team Form Maker Plugin up to 1.15.18 on WordPress cross site scripting


📈 40.17 Punkte

📌 CVE-2023-45071 | 10Web Form Builder Team Form Maker Plugin up to 1.15.18 on WordPress cross site scripting


📈 40.17 Punkte

📌 CVE-2023-52135 | WS Form Drag & Drop Contact Form Builder Plugin up to 1.9.170 on WordPress sql injection


📈 40.17 Punkte

📌 CVE-2022-23180 | Contact Form & Lead Form Elementor Builder Plugin up to 1.7.3 on WordPress Setting authorization (ID 2670484)


📈 40.17 Punkte

📌 CVE-2022-23179 | Contact Form & Lead Form Elementor Builder Plugin up to 1.6.x on WordPress cross site scripting


📈 40.17 Punkte

📌 CVE-2023-5822 | Drag and Drop Multiple File Upload Contact Form 7 up to 1.3.7.3 on WordPress unrestricted upload


📈 39.48 Punkte

📌 CVE-2023-6925 | Unlimited Addons for WPBakery Page Builder Plugin up to 1.0.42 on WordPress unrestricted upload


📈 39.26 Punkte

📌 CVE-2022-3906 | Easy Form Builder Plugin up to 3.3.x on WordPress Setting cross site scripting


📈 38.96 Punkte

📌 CVE-2023-50896 | weForms Easy Drag & Drop Contact Form Builder Plugin up to 1.6.17 on WordPress cross site scripting


📈 38.96 Punkte

📌 CVE-2022-3921 | Listingo Theme up to 3.2.6 AJAX Action unrestricted upload


📈 38.7 Punkte

📌 CVE-2023-5931 | rtMedia Plugin/BuddyPress Plugin/bbPress Plugin up to 4.6.15 on WordPress unrestricted upload


📈 38.65 Punkte

📌 Simple College Website 1.0 Image Upload ajax.php unrestricted upload


📈 37.74 Punkte

📌 CVE-2022-4101 | Images Optimize and Upload CF7 Plugin up to 2.1.4 on WordPress AJAX Action path traversal


📈 37.71 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software