Vulnerabilidades de spiderdevs (CVE)

Registros CVE publicados para spiderdevs, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados

6.1Media

CVE-2024-13362 hace 6 meses

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

sebet Go Fetch Jobs (for WP Job Manager); 5starplugins Dynamic Copyright Year; peterschulznl Code Manager; bplugins Advanced Scrollbar – Custom Scrollbar Styling and Behavior

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

6.4Media

CVE-2025-2543 hace 1 año

Advanced Accordion Gutenberg Block <= 5.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

spiderdevs Advanced Accordion Gutenberg Block – Create Beautiful FAQs, Content Accordions & Interactive Tabs

The Advanced Accordion Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping. This makes it possible for au…

6.1Media

CVE-2024-9896 hace 2 años

BBP Core – Expand bbPress powered forums with useful features <= 1.2.5 - Reflected Cross-Site Scripting via add_query_arg Parameter

spiderdevs Forumax – AI Powered Advanced Community Forum Plugin

The BBP Core – Expand bbPress powered forums with useful features plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.2.5. This ma…