Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2023-2117 | 10Web Image Optimizer Plugin up to 1.0.26 on WordPress AJAX Action get_subdirs dir path traversal


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability has been found in 10Web Image Optimizer Plugin up to 1.0.26 on WordPress and classified as critical. This vulnerability affects the function get_subdirs of the component AJAX Action Handler. The manipulation of the argument dir leads to path traversal. This vulnerability was named CVE-2023-2117. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ 10Web Mobile-Friendly Image Gallery Plugin up to 1.5.68 on WordPress AJAX Action gallery_id gallery_id/tag/album_id/_id cross site scripting


📈 51.98 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2449 | reSmush.it Only Free Image Optimizer & Compress Plugin Plugin AJAX Action cross-site request forgery


📈 46.05 Punkte
🕵️ Sicherheitslücken

🕵️ 10Web Form Maker Plugin up to 1.13.4 on WordPress wp-admin/admin-ajax.php action cross site request forgery


📈 45.89 Punkte
🕵️ Sicherheitslücken

🕵️ D-Link DIR-817LW/DIR-816L/DIR-816/DIR-850L/DIR-868L MyDlink Log information disclosure


📈 43.06 Punkte
🕵️ Sicherheitslücken

🕵️ D-Link DIR-822/DIR-860L/DIR-868L/DIR-880L/DIR-890L SetAccessPointMode IsAccessPoint command injection


📈 43.06 Punkte
🕵️ Sicherheitslücken

🕵️ D-Link DIR-300/DIR-600/DIR-645/DIR-845/DIR-865 prior v1.02b03 soap.cgi NewInternalClient/NewExternalPort/NewInternalPort command injection


📈 43.06 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2014-6243 | EWWW Image Optimizer plugin up to 2.0 ewww-image-optimizer.php error cross site scripting (ID 128621 / ID 13064)


📈 42.13 Punkte
🕵️ Sicherheitslücken

🕵️ Ruby up to 2.2.9/2.3.6/2.4.3/2.5.0 Dir.open/Dir.new/Dir.entries/Dir.empty Dirempty directory traversal


📈 39.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-29810 | 10Web PhotoGallery Plugin up to 1.8.21 on WordPress admin-ajax.php thumb_url cross site scripting


📈 39.62 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-29808 | 10Web PhotoGallery Plugin up to 1.8.21 on WordPress admin-ajax.php image_id cross site scripting


📈 39.62 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-29809 | 10Web PhotoGallery Plugin up to 1.8.21 on WordPress admin-ajax.php image_url cross site scripting


📈 39.62 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-29832 | 10Web PhotoGallery Plugin up to 1.8.21 on WordPress admin-ajax.php current_url cross site scripting


📈 39.62 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-0221 | 10Web Photo Gallery Plugin up to 1.8.19 on WordPress File Rename path traversal


📈 39.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-5481 | 10Web Photo Gallery Plugin up to 1.8.23 on WordPress esc_dir path traversal


📈 39.42 Punkte
🕵️ Sicherheitslücken

🕵️ 10Web Photo Gallery plugin up to 1.5.24 on WordPress admin-ajax.php tagtext Local File Inclusion


📈 38.8 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-0779 | User Meta Plugin up to 2.4.3 on WordPress AJAX Action um_show_uploaded_file filepath path traversal


📈 38.29 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1953 | Product Configurator for WooCommerce Plugin up to 1.2.31 on WordPress AJAX Action unlink path traversal


📈 38.29 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-4101 | Images Optimize and Upload CF7 Plugin up to 2.1.4 on WordPress AJAX Action path traversal


📈 38.29 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2008-0465 | Seagull 0.6.3 Optimizer optimizer.php files path traversal (EDB-4980 / XFDB-39902)


📈 36.86 Punkte
🕵️ Sicherheitslücken

🕵️ Ajax Pagination Plugin 1.1 auf WordPress wp-admin/admin-ajax.php ajax_navigation loop Directory Traversal


📈 35.95 Punkte
🕵️ Sicherheitslücken

🕵️ Ajax Pagination Plugin 1.1 auf WordPress wp-admin/admin-ajax.php ajax_navigation loop Directory Traversal


📈 35.95 Punkte
🕵️ Sicherheitslücken

🕵️ Ajax Pagination Plugin 1.1 on WordPress wp-admin/admin-ajax.php ajax_navigation loop directory traversal


📈 35.95 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1657 | Jupiter Theme/JupiterX Theme on WordPress AJAX Action jupiterx_cp_load_pane_action path traversal


📈 34.14 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-8120 | ImageRecycle PDF & Image Compression Plugin up to 3.1.14 on WordPress AJAX Action cross-site request forgery


📈 33.33 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-6631 | ImageRecycle PDF & Image Compression Plugin up to 3.1.14 on WordPress AJAX Action authorization


📈 33.33 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1951 | Core plugin for Kitestudio Plugin up to 2.3.0 on WordPress AJAX Action cross site scripting


📈 31.38 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1790 | Ajax Load More Plugin up to 7.0.1 on WordPress path traversal (ID 3056137)


📈 31.2 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2014-9734 | ThemePunch Slider Revolution Plugin up to 4.1 on WordPress wp-admin/admin-ajax.php img path traversal (Patch 132366 / EDB-34511)


📈 31.2 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-24910 | Transposh WordPress Translation Plugin up to 1.0.7 on WordPress AJAX Action cross site scripting


📈 31.15 Punkte
🕵️ Sicherheitslücken

🕵️ WP-jobhunt Plugin up to 2.4 on WordPress AJAX Request admin-ajax.php cs_reset_pass() privilege escalation


📈 30.58 Punkte
🕵️ Sicherheitslücken

🕵️ WP-jobhunt Plugin up to 2.4 on WordPress AJAX Request admin-ajax.php cs_employer_ajax_profile() information disclosure


📈 30.58 Punkte
🕵️ Sicherheitslücken

🕵️ Ajax Load More Plugin up to 5.3.1 on WordPress /wp-admin/admin-ajax.php repeater sql injection


📈 30.58 Punkte
🕵️ Sicherheitslücken

🕵️ Facebook for WordPress Plugin up to 3.0.3 on WordPress AJAX Action cross-site request forgery


📈 30.32 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1394 | Photo Gallery by 10Web Plugin up to 1.6.3 on WordPress Setting cross site scripting


📈 28.36 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3300 | 10Web Form Maker Plugin up to 1.15.5 on WordPress sql injection


📈 28.36 Punkte
🕵️ Sicherheitslücken

matomo
•