Datenverwurstungszentrale

Shariff Wrapper

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-4098

  • EPSS 0.7%
  • Veröffentlicht 20.06.2024 07:15:41
  • Zuletzt bearbeitet 09.05.2025 15:03:58

The Shariff Wrapper plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.6.13 via the shariff3uu_fetch_sharecounts function. This allows unauthenticated attackers to include and execute arbitrary files on the...

5.4

CVE-2024-2695

  • EPSS 0.2%
  • Veröffentlicht 15.06.2024 09:15:11
  • Zuletzt bearbeitet 09.05.2025 15:03:45

The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortcode in all versions up to, and including, 4.6.13 due to insufficient input sanitization and output escaping on user supplied attrib...

5.4

CVE-2024-1450

  • EPSS 0.15%
  • Veröffentlicht 21.03.2024 02:51:42
  • Zuletzt bearbeitet 09.05.2025 15:03:36

The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortcode in all versions up to, and including, 4.6.10 due to insufficient input sanitization and output escaping on user supplied attrib...

5.4

CVE-2024-0966

  • EPSS 0.15%
  • Veröffentlicht 21.03.2024 02:51:29
  • Zuletzt bearbeitet 09.05.2025 15:03:22

The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortcode in all versions up to, and including, 4.6.9 due to insufficient input sanitization and output escaping on user supplied attribu...

5.4

CVE-2023-6500

  • EPSS 0.13%
  • Veröffentlicht 21.03.2024 02:50:38
  • Zuletzt bearbeitet 09.05.2025 15:02:52

The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortcode in all versions up to, and including, 4.6.9 due to insufficient input sanitization and output escaping on user supplied attribu...

5.4

CVE-2024-29109

  • EPSS 0.07%
  • Veröffentlicht 19.03.2024 15:15:07
  • Zuletzt bearbeitet 09.05.2025 15:03:07

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jan-Peter Lambeck & 3UU Shariff Wrapper allows Stored XSS.This issue affects Shariff Wrapper: from n/a through 4.6.10.

6.1

CVE-2024-1106

Exploit
  • EPSS 0.27%
  • Veröffentlicht 27.02.2024 09:15:37
  • Zuletzt bearbeitet 01.05.2025 14:21:07

The Shariff Wrapper WordPress plugin before 4.6.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disa...