Theviper17

The WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin for WordPress allows an attacker with Contributor-level permissions to upload malicious files. This occurs when importing recipes via CSV, specifically by providing a remote URL during the import process. Successful exploitation can lead to Remote Code Execution (RCE). The vulnerability involves arbitrary file uploads, enabling the attacker to upload a PHP file. The vulnerable component is the CSV import functionality.

The WordPress Image shrinker plugin contains a Server-Side Request Forgery (SSRF) flaw. This allows for Server Side Request Forgery.

A flaw exists in Icegram Icegram Express Pro email-subscribers-premium related to the deserialization of untrusted data, potentially leading to object injection.

A Server-Side Request Forgery (SSRF) issue exists in Icegram Icegram Express Pro email-subscribers-premium. This allows for Server Side Request Forgery.

A flaw exists in Rustaurius Front End Users that allows for Stored Cross-site Scripting (XSS). This issue arises from improper neutralization of input during web page generation. Successful exploitation could allow an attacker to inject malicious scripts into web pages viewed by other users. The vulnerability affects the Front End Users component.

The software contains a flaw related to improper input handling during web page generation, specifically a Cross-site Scripting issue. This allows for Stored XSS attacks. The issue involves the injection of malicious scripts into web pages, potentially compromising user data and system security.

The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-Site Scripting (XSS). This means that malicious code can be injected into the website and executed by other users. The vulnerability allows an attacker to inject malicious scripts into web pages. The vulnerable component is susceptible to Stored XSS attacks.

The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be embedded in web pages and executed by unsuspecting users. The issue affects the application's handling of user-supplied data when generating web content.

The software contains a flaw related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious code can be injected into the application and executed by other users. The affected component is Highlight and Share – Social Text and Image Sharing.

A Cross-Site Request Forgery (CSRF) issue exists in wpdesk Flexible PDF Invoices for WooCommerce & WordPress. This allows attackers to perform actions on behalf of an authenticated user without their knowledge.

A flaw exists in Noumaan Yaqoob Compact Archives that allows for Stored Cross-site Scripting (XSS). This issue is due to improper neutralization of input during web page generation. The vulnerability could allow an attacker to inject malicious scripts into web pages viewed by other users. The affected product allows for the injection of scripts via the application’s web interface.

The software contains a flaw related to improper input handling during web page generation, which can lead to Cross-site Scripting (XSS). This specific instance is a DOM-Based XSS issue.

The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious scripts. The affected component is susceptible to Stored XSS attacks.

The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-site Scripting issue. This allows for the injection of malicious scripts into web pages. The affected component is Card Elements for WPBakery.

The software contains a flaw related to improper input handling during web page generation, leading to a potential Cross-site Scripting (XSS) issue. Specifically, the issue is a DOM-Based XSS. The affected component allows for the injection of malicious scripts into web pages.

The WP Social Widget software contains a flaw related to improper input handling during web page generation, which can lead to Cross-site Scripting (XSS). This allows for the injection of malicious scripts. The issue is a Stored XSS, meaning the malicious script is persistently stored and executed when a user views the affected page.

The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be injected into web pages viewed by other users. The vulnerability exists due to insufficient sanitization of user-supplied data.

The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting (XSS).

The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting (XSS).

The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting (XSS).