Skip to content
OpenAdvisories

Vendor

deano1987

2 known vulnerabilities.

Products

Advanced AJAX Page Loader 1 AMP Toolbox 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-6310

    Advanced AJAX Page Loader <= 2.7.7 - Cross-Site Request Forgery to Arbitrary File Upload

    The Advanced AJAX Page Loader plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 2.7.7. This is due to missing nonce validation in the 'admin_init_AAPL' function and missing file type va…

    deano1987 Advanced AJAX Page Loader Web / CMS
  • High 8.2
    CVE-2022-40700

    Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins

    Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio Wo…

    wpopal Long Watch Studio Arun Basil Lal deano1987 Web / CMS