colorlib Schwachstellen (CVE)

Für colorlib veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse
6.1Mittel
CVE-2025-3662

FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS

FancyBox for WordPress

The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries' caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated …

5.3Mittel
CVE-2024-1473

Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure

colorlibplugins Coming Soon & Maintenance Mode by Colorlib; colorlib coming_soon_\&_maintenance_mode

The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.99 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page contents via …