) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
Search Parameters:
- Search Type: Search Last 3 Months
There are 13,983 matching records.
Displaying matches 13,981 through 13,983.
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2024-2263 |
Themify WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Published: April 01, 2024; 1:15:07 AM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
| CVE-2024-2262 |
Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to make logged in users delete arbitrary filters via CSRF attack, granted they know the related filter slugs Published: April 01, 2024; 1:15:07 AM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |
| CVE-2024-1526 |
The Hubbub Lite WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before displaying its content in a meta tag. Published: April 01, 2024; 1:15:07 AM -0400 |
V4.0:(not available) V3.x:(not available) V2.0:(not available) |