Vulnerabilidades de mte90 (CVE)

Registros CVE publicados para mte90, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

6.1Media

CVE-2024-13362 hace 6 meses

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

sebet Go Fetch Jobs (for WP Job Manager); 5starplugins Dynamic Copyright Year; peterschulznl Code Manager; bplugins Advanced Scrollbar – Custom Scrollbar Styling and Behavior

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

5.3Media

CVE-2024-6570 hace 2 años

Glossary <= 2.2.26 - Unauthenticated Full Path Disclosure

mte90 Glossary; codeat glossary

The Glossary plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.26. This is due the plugin utilizing wpdesk and not preventing direct access to the test files along with display_errors being enabled. This make…