Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 CVE-2015-6535 | YouTube Embed Plugin up to 3.3.2 on WordPress options-profiles.php youtube_embed_name cross site scripting (ID 133340 / BID-76487)
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 CVE-2015-6535 | YouTube Embed Plugin up to 3.3.2 on WordPress options-profiles.php youtube_embed_name cross site scripting (ID 133340 / BID-76487)


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability has been found in YouTube Embed Plugin up to 3.3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file includes/options-profiles.php. The manipulation of the argument youtube_embed_name leads to cross site scripting. This vulnerability is known as CVE-2015-6535. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component. ...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 CVE-2023-5659 | tryinteract Interact Embed A Quiz On Your Site Plugin up to 3.0.7 on WordPress Permissions cross site scripting


📈 40.77 Punkte

📌 CVE-2022-4788 | Embed PDF Plugin up to 1.0.6 on WordPress Shortcode Attribute cross site scripting


📈 37.94 Punkte

📌 CVE-2023-23707 | Awsm Innovations Embed Any Document Plugin up to 2.7.1 on WordPress File Upload cross site scripting


📈 37.94 Punkte

📌 CVE-2023-4995 | Embed Calendly Plugin up to 3.6 on WordPress Shortcode cross site scripting


📈 37.94 Punkte

📌 CVE-2023-47811 | Suresh Kumar Mukhiya Anywhere Flash Embed Plugin up to 1.0.5 on WordPress cross site scripting


📈 37.94 Punkte

📌 CVE-2023-50824 | Brian Batt Insert or Embed Articulate Content into WordPress Plugin cross site scripting


📈 37.94 Punkte

📌 CVE-2023-51694 | Epiphyt Embed Privacy Plugin up to 1.8.0 on WordPress cross site scripting


📈 37.94 Punkte

📌 embed-comment-images Plugin up to 0.5 on WordPress cross site scripting


📈 36.76 Punkte

📌 WordPress YouTube Embed Plus 11.8.1 Cross Site Request Forgery


📈 34.4 Punkte

📌 [webapps] WordPress Plugin Insert or Embed Articulate Content into WordPress - Remote Code Execution


📈 32.66 Punkte

📌 Nextcloud: WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (UNAUTHORIZED)


📈 32.66 Punkte

📌 CVE-2023-25711 | WPGlobus Translate Options Plugin up to 2.1.0 on WordPress cross site scripting


📈 31.07 Punkte

📌 CVE-2024-0659 | Easy Digital Downloads Plugin up to 3.2.6 on WordPress Pricing Options cross site scripting


📈 31.07 Punkte

📌 Supsystic Contact Form Plugin up to 1.7.14 on WordPress Options Page tab cross site scripting


📈 29.89 Punkte

📌 Supsystic Popup Plugin up to 1.10.4 on WordPress Options Page tab cross site scripting


📈 29.89 Punkte

📌 Supsystic Ultimate Maps Plugin up to 1.2.4 on WordPress Options Page tab cross site scripting


📈 29.89 Punkte

📌 podlove-podcasting-plugin-for-wordpress Plugin up to 2.3.15 on WordPress cross site scripting


📈 29.18 Punkte

📌 CVE-2023-28420 | Leo Caseiro Custom Options Plus Plugin up to 1.8.1 on WordPress cross-site request forgery


📈 27.85 Punkte

📌 CVE-2024-0379 | Custom Twitter Feeds Plugin up to 2.2.1 on WordPress Options Update cross-site request forgery


📈 27.85 Punkte

📌 #0daytoday #WordPress Insert or Embed Articulate Content Plugin - Remote Code Execution Exploit [#0day #Exploit]


📈 27.79 Punkte

📌 #0daytoday #WordPress Insert or Embed Articulate Content Plugin - Remote Code Execution Exploit [#0day #Exploit]


📈 27.79 Punkte

📌 Video Embed Plugin up to 1.0 on WordPress GET Parameter id sql injection


📈 27.79 Punkte

📌 CVE-2023-1088 | WP Plugin Manager Plugin up to 1.1.7 on WordPress Plugin Activation cross-site request forgery


📈 27.49 Punkte

📌 Valine 1.3.3 PDF File EMBED Element HTML Injection cross site scripting


📈 26.66 Punkte

📌 CVE-2023-23687 | Youtube Shortcode Plugin up to 1.8.5 on WordPress cross site scripting


📈 26.35 Punkte

📌 CVE-2022-4783 | Youtube Channel Gallery Plugin up to 2.4 on WordPress Shortcode Attribute cross site scripting


📈 26.35 Punkte

📌 CVE-2023-45049 | Ciprian Popescu YouTube Playlist Player Plugin up to 4.6.7 on WordPress cross site scripting


📈 26.35 Punkte

📌 CVE-2023-49180 | Ternstyle Automatic Youtube Video Posts Plugin up to 5.2.2 on WordPress cross site scripting


📈 26.35 Punkte

📌 CVE-2024-0625 | WPFront Notification Bar up to 3.3.2 on WordPress wpfront-notification-bar-options[custom_class] cross site scripting


📈 25.84 Punkte

📌 CVE-2022-1951 | Core plugin for Kitestudio Plugin up to 2.3.0 on WordPress AJAX Action cross site scripting


📈 25.49 Punkte

📌 CVE-2022-3808 | WebFactory Under Construction Plugin on WordPress Plugin Setting cross site scripting


📈 25.49 Punkte

📌 CVE-2022-2190 | Gallery Plugin for Plugin up to 1.8.4.6 on WordPress Attribute $_SERVER['REQUEST_URI'] cross site scripting


📈 25.49 Punkte

📌 CVE-2023-0423 | Amazon S3 Plugin Plugin up to 1.5 on WordPress cross site scripting


📈 25.49 Punkte

📌 CVE-2023-47777 | Automattic WooCommerce Plugin/WooCommerce Blocks Plugin on WordPress cross site scripting


📈 25.49 Punkte

📌 CVE-2023-51415 | GiveWP Donation Plugin and Fundraising Platform Plugin up to 3.2.2 on WordPress cross site scripting


📈 25.49 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software