BuddyPress Community Plugin up to 1.0.6 on WordPress About Me Widget cross site scripting

A vulnerability, which was classified as problematic, has been found in BuddyPress Community Plugin up to 1.0.6 on WordPress (WordPress Plugin). This issue affects some unknown functionality of the component About Me Widget. Upgrading to version 1.0.7 eliminates this vulnerability.

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2024-8523 : LMXCMS UP TO 1.4 SQL COMMAND EXECUTION MODULE ADMIN.PHP FORMATDATA DATA CODE INJECTION

CVE-2024-8523 : LMXCMS UP TO 1.4 SQL COMMAND EXECUTION MODULE ADMIN.PHP FORMATDATA DATA CODE INJECTION

Description A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the

CVE-2024-25584 : OPEN-XCHANGE OX DOVECOT PRO UP TO 2.3.21 DATA COMMAND DATA AUTHENTICITY

CVE-2024-25584 : OPEN-XCHANGE OX DOVECOT PRO UP TO 2.3.21 DATA COMMAND DATA AUTHENTICITY

Description Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be

CVE-2024-8521 : WAVELOG UP TO 1.8.0 LIVE QSO /QSO INDEX MANUAL CROSS SITE SCRIPTING

CVE-2024-8521 : WAVELOG UP TO 1.8.0 LIVE QSO /QSO INDEX MANUAL CROSS SITE SCRIPTING

Description A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index