Rezaduty

The issue is related to a Missing Authorization vulnerability, which allows for broken access control and the retrieval of embedded sensitive data. Users are urged to update to the latest version to mitigate risks.

The issue arises from insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the `X-Forwarded-For` header with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address or country from logging in.

The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the nm vistior page.

The issue arises from insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. This allows attackers to supply the `X-Forwarded-For` header with a different IP Address that will be logged, potentially bypassing settings that block specific IP addresses or countries from logging in.

The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the `X-Forwarded-For` header with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in.

The issue arises from insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can exploit this by supplying the `X-Forwarded-For` header with a different IP Address, which will be logged and can be used to bypass settings that may have blocked out an IP address or country from logging in.

The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the `X-Forwarded-For` header with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address or country from logging in.

The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the `X-Forwarded-For` header with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in.

A problematic issue has been found in the processing of the file /core/config-revisions of the component Home Page Configuration. The manipulation with the input `<h1 onload=alert(1)>`test`</h1>` leads to cross site scripting. The attack may be initiated remotely. The real existence of this vulnerability is still doubted at the moment.

The issue is related to the exposure of sensitive information to an unauthorized actor. This can potentially lead to unauthorized access to confidential data. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to Deserialization of Untrusted Data, which affects the File Manager plugin for WordPress.

The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.

The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to.

A Cross-Site Request Forgery (CSRF) issue affects the WP-Advanced-Search plugin. This allows an attacker to perform unintended actions on a user's account.

The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the `X-Forwarded-For` header with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in.