Ngo Van

The issue concerns Stored Cross-Site Scripting (XSS) vulnerabilities in the WP Page Builder plugin. These vulnerabilities allow for multiple authentication bypasses.

The issue is related to a Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability can be exploited by contributors or users with higher privileges. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

The issue is related to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker with admin or higher privileges can inject malicious scripts into the application, which can then be executed by other users. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

The issue is related to a Reflected Cross-Site Scripting (XSS) vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized actions on behalf of the user. The vulnerability is present in the ExpressTech Quiz And Survey Master plugin for WordPress and requires authentication with editor or higher privileges to exploit.

The issue is related to an Authenticated Stored Cross-Site Scripting (XSS) in the Pop-Up Chop Chop plugin. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue concerns multiple Cross-Site Request Forgery (CSRF) vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the user is authenticated to.

The issue is related to a Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability. This vulnerability can be exploited in the Booking Ultra Pro plugin at WordPress.

The issue is related to an insecure direct object references (IDOR) vulnerability. This vulnerability allows attackers to change the content of the quiz.

The issue is an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker with contributor or higher privileges can inject malicious scripts into the application, which will be executed by other users. The estimated number of potentially affected devices worldwide is not available.

The issue is an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. It affects the Themes Awesome History Timeline plugin at WordPress, allowing potential exploitation by authenticated users with author or higher privileges.

The issue is related to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker with contributor or higher privileges can inject malicious scripts into the application, which can then be executed by other users.

The issue concerns multiple authenticated Stored Cross-Site Scripting (XSS) vulnerabilities. These vulnerabilities can be exploited by contributors or users with higher privileges. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

The issue is related to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker with contributor or higher privileges can inject malicious scripts into the NOTICE BOARD plugin, potentially affecting users who interact with the compromised plugin.

The issue is an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker can inject malicious scripts into the website without needing authentication, potentially affecting user sessions.

The issue is related to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker with contributor or higher privileges can inject malicious scripts into the application, potentially affecting users who interact with the compromised content.

The issue concerns multiple authenticated Stored Cross-Site Scripting (XSS) vulnerabilities. This means that an attacker with contributor or higher privileges can inject malicious scripts into the application, which are then stored and executed by the application, potentially leading to unauthorized actions or data theft.

The issue concerns an Unauthenticated Plugin Settings Change vulnerability. It affects the Awesome Filterable Portfolio plugin at WordPress.

The issue concerns Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities. This means that an attacker could potentially inject malicious scripts into the application, which would then be executed by the user's browser, allowing the attacker to steal user data or take control of the user's session.

The issue is related to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker with author or higher privileges can inject malicious scripts into the game plugin, potentially affecting users who interact with the compromised content.

The issue is an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. It affects the PluginlySpeaking Easy Org Chart plugin at WordPress, where contributors or higher-privileged users can inject malicious scripts.