Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2023-6623 | Essential Blocks Plugin up to 4.4.2 on WordPress REST API path traversal


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in Essential Blocks Plugin up to 4.4.2 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component REST API. The manipulation leads to path traversal. This vulnerability is known as CVE-2023-6623. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

⚠️ #0daytoday #WordPress Essential Blocks 4.2.0 / Essential Blocks Pro 1.1.0 PHP Object Injection Vuln [#0day #Exploit]


📈 46.33 Punkte
⚠️ PoC

🕵️ wp-google-maps Plugin up to 7.11.17 on WordPress REST API class.rest-api.php SELECT Statement sql injection


📈 40.87 Punkte
🕵️ Sicherheitslücken

🕵️ WP Live Chat Support up to 8.0.32 on WordPress REST API REST API Call privilege escalation


📈 36.06 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-23900 | Matrix Project Plugin up to 822.v01b_8c85d16d2 on Jenkins REST API path traversal


📈 34.28 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-37457 | Ultimate Blocks Gutenberg Blocks Plugin up to 3.1.9 on WordPress cross site scripting


📈 32.9 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1854 | Essential Blocks Plugin up to 4.5.1 on WordPress cross site scripting


📈 31.37 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-2255 | Essential Blocks Plugin up to 4.5.3 on WordPress cross site scripting (ID 3053199)


📈 31.37 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-3818 | Essential Blocks Plugin up to 4.5.9 on WordPress Social Icons Block cross site scripting (ID 3072932)


📈 31.37 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-5595 | Essential Blocks Plugin up to 4.6.x on WordPress Page cross site scripting


📈 31.37 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-47385 | WPDeveloper Essential Blocks for Gutenberg Plugin up to 4.8.4 on WordPress cross site scripting


📈 31.37 Punkte
🕵️ Sicherheitslücken

🕵️ WordPress bis 4.7.0 REST API class-wp-rest-users-controller.php Information Disclosure


📈 30.31 Punkte
🕵️ Sicherheitslücken

🕵️ WordPress bis 4.7.0 REST API class-wp-rest-users-controller.php Information Disclosure


📈 30.31 Punkte
🕵️ Sicherheitslücken

🕵️ WordPress 4.7.0 REST API class-wp-rest-users-controller.php information disclosure


📈 30.31 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-28981 | Liferay Portal up to 7.4.2 Hypermedia REST API path traversal


📈 29.46 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-3078 | Qdrant up to 1.6.1/1.7.4/1.8.2 Full Snapshot REST API snapshots.rs path traversal (3856/3867)


📈 29.46 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1988 | Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel Plugin cross site scripting


📈 28.36 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-4042 | Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel Plugin Block Attribute cross site scripting


📈 28.36 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-35731 | WP Moose Kenta Gutenberg Blocks Responsive Blocks and Block Templates Library for Gutenberg Editor Plugin cross site scripting


📈 28.36 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-0881 | Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel Plugin Ajax Action access control


📈 28.36 Punkte
🕵️ Sicherheitslücken

🕵️ Silver Peak Unity Orchestrator up to 8.9.10/8.10.10/9.0.0 REST API /sqlExecution path traversal


📈 28.35 Punkte
🕵️ Sicherheitslücken

🕵️ Silver Peak Unity Orchestrator up to 8.9.10/8.10.10/9.0.0 REST API /debugFiles path traversal


📈 28.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-25059 | Download Plugin Plugin up to 1.x on WordPress path traversal


📈 27.88 Punkte
🕵️ Sicherheitslücken

🔧 Rest API v/s Web API v/s SOAP API


📈 27.25 Punkte
🔧 Programmierung

🔧 Rest API Vs HTTP API Vs WebSocket API


📈 27.25 Punkte
🔧 Programmierung

🕵️ CVE-2024-20417 | Cisco Identity Services Engine Software up to 3.3.0 REST API sql injection (cisco-sa-ise-rest-5bPKrNtZ)


📈 26.89 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-2548 | parisneo lollms-webui up to 9.4 on Windows Request Path(path).is_absolute absolute path traversal


📈 26.78 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1598 | WPQA Builder Plugin up to 5.3 on WordPress REST API Endpoint access control


📈 26.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2117 | GiveWP Plugin up to 2.20.2 on WordPress REST API Endpoint /donor-wall information disclosure (ID 2743833)


📈 26.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2379 | Easy Student Results Plugin up to 2.2.8 on WordPress REST API authorization


📈 26.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3708 | Web Stories Plugin up to 1.24.0 on WordPress REST API Endpoint /v1/hotlink/proxy url server-side request forgery


📈 26.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3360 | LearnPress Plugin prior 4.1.7.2 on WordPress REST API Endpoint wp_hash deserialization


📈 26.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-45073 | REST API Authentication Plugin up to 2.4.0 on WordPress cross-site request forgery


📈 26.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-4417 | WP Cerber Security Plugin up to 9.3.3 on WordPress REST API information disclosure


📈 26.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1609 | school-management-pro Plugin up to 9.9.6 on WordPress REST API backdoor


📈 26.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-23825 | TablePress Plugin up to 2.2.4 on Wordpress REST API server-side request forgery


📈 26.23 Punkte
🕵️ Sicherheitslücken

matomo
•