wpWax

46 results · Feed

• Medium 5.4
  CVE-2023-47824

  WordPress Legal Pages Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin <= 1.3.8 versions.

  wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator
  Nov 22, 2023
• Medium 5.1
  CVE-2023-41798

  WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection

  Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: f…

  wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listings Web / CMS
  Nov 7, 2023
• Medium 6.5
  CVE-2023-1889

  Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task

  The Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4. This is due to improper validation and authorization checks within the listing_task function. This makes it possible for authent…

  wpWax Directorist: AI-Powered Business Directory, Listings & Classified Ads Web / CMS
  Jun 9, 2023
• High 8.8
  CVE-2023-1888

  Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation

  The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due to a lack of validation checks within login.php. This makes it possible for authenticated attackers, with subscriber-le…

  wpWax Directorist: AI-Powered Business Directory, Listings & Classified Ads Web / CMS
  Jun 9, 2023
• Medium 4.1
  CVE-2022-34650

  WordPress Team plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

  Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in wpWax Team plugin <= 1.2.6 at WordPress.

  wpWax Team (WordPress plugin) Web / CMS
  Jul 22, 2022
• Medium 4.1
  CVE-2022-34853

  WordPress Team plugin <= 1.2.6 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

  Multiple Authenticated (contributor or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in wpWax Team plugin <= 1.2.6 at WordPress.

  wpWax Team (WordPress plugin) Web / CMS
  Jul 22, 2022