Bee-K

The issue is an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. It affects the WP Maintenance plugin at WordPress, allowing for potential exploitation.

The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability, which can lead to a change in popup status. This type of vulnerability allows an attacker to perform actions on a user's behalf without their knowledge or consent.

The issue concerns multiple Cross-Site Request Forgery (CSRF) vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the user is authenticated to.

The issue is an Authenticated Persistent Cross-Site Scripting (XSS) vulnerability. This means that an attacker with at least author-level access can inject malicious scripts into the website, which will be executed by other users' browsers. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

A Cross-Site Request Forgery (CSRF) issue exists, allowing attackers to send messages.

The issue is related to a Persistent Cross-Site Scripting (XSS) vulnerability. This means that an attacker could potentially inject malicious scripts into the website, which would then be executed by other users' browsers.

A Cross-Site Request Forgery (CSRF) issue allows an attacker to delete the CPT base. This can be exploited by an attacker to manipulate requests, potentially leading to unauthorized actions on the affected system.

The issue is related to a Cross-Site Scripting (XSS) vulnerability that can be exploited via Cross-Site Request Forgery (CSRF). The `&jpg quality` parameter is vulnerable.

The issue is related to an Authenticated Local File Inclusion (LFI) vulnerability. This means that an attacker with administrator or higher role access can potentially include and execute local files on the server, which could lead to sensitive data exposure or code execution.

The issue is a Reflected Cross-Site Scripting (XSS) vulnerability. It occurs via the `orderby` vulnerable parameter.

A Cross-Site Request Forgery (CSRF) issue allows an attacker to perform actions such as deleting or toggling snippets on or off.

The issue is related to a Persistent Cross-Site Scripting (XSS) vulnerability. It can be exploited via Cross-Site Request Forgery (CSRF) and involves vulnerable parameters `title` and `snippet code`.

The issue allows attackers to trick logged-in admin users into uploading dangerous files into the /wp-content/uploads/ directory through a Cross-Site Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability.