Event Calendar – Calendar (WordPress Plugin) Security Vulnerabilities

CVE-2024-37231 WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through...

CVE-2024-37231 WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through...

CVE-2024-37228 WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP Team InstaWP Connect allows Code Injection.This issue affects InstaWP Connect: from n/a through...

CVE-2024-37228 WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP Team InstaWP Connect allows Code Injection.This issue affects InstaWP Connect: from n/a through...

CVE-2024-37111 WordPress WishList Member X plugin <= 3.25.1 - Unauthenticated Denial of Service Attack vulnerability

Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a through...

CVE-2024-37111 WordPress WishList Member X plugin <= 3.25.1 - Unauthenticated Denial of Service Attack vulnerability

Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a through...

CVE-2024-37109 WordPress WishList Member X plugin <= 3.25.1 - Authenticated Arbitrary PHP Code Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a through...

CVE-2024-37109 WordPress WishList Member X plugin <= 3.25.1 - Authenticated Arbitrary PHP Code Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a through...

CVE-2024-37107 WordPress WishList Member X plugin <= 3.25.1 - Authenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This issue affects WishList Member X: from n/a through...

CVE-2024-37107 WordPress WishList Member X plugin <= 3.25.1 - Authenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This issue affects WishList Member X: from n/a through...

CVE-2024-37092 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through...

CVE-2024-37092 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through...

CVE-2024-37091

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through...

CVE-2024-37091

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through...

CVE-2024-37089

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through...

CVE-2024-37089

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through...

CVE-2024-37091 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through...

CVE-2024-37089 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: wazero, node-problem-detector, gobuster, gitlab-shell, dagger, secrets-store-csi-driver-provider-azure, velero, gitlab-runner, kaf, regclient, prometheus-blackbox-exporter, nri-elasticsearch, scorecard, esbuild, kubernetes-dashboard-metrics-scraper, paranoia, task,...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner, k3d, falco, gke-gcloud-auth-plugin, wireguard-go, grpcurl, restic,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: skopeo, docker, cadvisor, nerdctl, zot, kaniko, trivy, runc, grype, kubescape, nvidia-device-plugin, newrelic-infrastructure-agent, kots, k3d, ctop, skaffold, syft, ingress-nginx-controller, datadog-agent, zarf, buildkitd, kubernetes, k9s, telegraf, k3s,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: bank-vaults, node-problem-detector, istio-pilot-agent, gitlab-shell, dagger, secrets-store-csi-driver-provider-azure, velero, gitlab-runner, kaf, rabbitmq-messaging-topology-operator, containerd, hugo, scorecard, kubernetes-dashboard-metrics-scraper, runc,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: node-problem-detector, gobuster, gitlab-shell, gitlab-runner, kaf, coredns, prometheus-blackbox-exporter, hugo, scorecard, gke-gcloud-auth-plugin, terraform-provider-azurerm, grype, kubescape, newrelic-infrastructure-agent, dgraph, prometheus-stackdriver-exporter,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: bank-vaults, gobuster, gitlab-shell, secrets-store-csi-driver-provider-azure, rabbitmq-messaging-topology-operator, coredns, hugo, kubernetes-dashboard-metrics-scraper, terraform-provider-azurerm, nri-f5, prometheus-nats-exporter, dgraph, cert-manager-webhook-pdns,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: bank-vaults, croc, secrets-store-csi-driver-provider-azure, spqr, snyk-cli, gitlab-runner, kaf, regclient, coredns, containerd, scorecard, jitsucom-bulker, kubernetes-dashboard-metrics-scraper, flyte, paranoia, runc, gke-gcloud-auth-plugin, tempo,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: bank-vaults, croc, secrets-store-csi-driver-provider-azure, spqr, snyk-cli, gitlab-runner, kaf, regclient, coredns, containerd, scorecard, jitsucom-bulker, kubernetes-dashboard-metrics-scraper, flyte, paranoia, runc, gke-gcloud-auth-plugin, tempo,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: bank-vaults, gobuster, gitlab-shell, secrets-store-csi-driver-provider-azure, snyk-cli, rabbitmq-messaging-topology-operator, coredns, kubernetes-dashboard-metrics-scraper, terraform-provider-azurerm, nri-f5, prometheus-nats-exporter, dgraph,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, gobuster, metrics-server, cortex, helm-push, aws-flb-kinesis, configmap-reload, vertical-pod-autoscaler, grpcurl, sonobuoy, goreleaser, scorecard, cilium-envoy, kubernetes-dashboard-metrics-scraper, kind, falco, gke-gcloud-auth-plugin,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: bank-vaults, node-problem-detector, gobuster, gitlab-runner, kaf, coredns, prometheus-blackbox-exporter, containerd, hugo, kubernetes-dashboard-metrics-scraper, runc, gke-gcloud-auth-plugin, newrelic-infrastructure-agent, dgraph, prometheus-stackdriver-exporter,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: bank-vaults, node-problem-detector, istio-pilot-agent, gitlab-shell, dagger, secrets-store-csi-driver-provider-azure, velero, gitlab-runner, kaf, rabbitmq-messaging-topology-operator, containerd, hugo, scorecard, kubernetes-dashboard-metrics-scraper, runc,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: wazero, node-problem-detector, gobuster, gitlab-shell, dagger, secrets-store-csi-driver-provider-azure, velero, gitlab-runner, kaf, regclient, prometheus-blackbox-exporter, nri-elasticsearch, scorecard, esbuild, kubernetes-dashboard-metrics-scraper, paranoia, task,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: nuclei, bank-vaults, k8sgpt, rekor, cortex, timestamp-authority, tekton-pipelines, secrets-store-csi-driver-provider-azure, chezmoi, teleport, velero, gitlab-runner, py3-cassandra-medusa, restic, step, pulumi, airflow, hugo, goreleaser, zot, cert-manager, flux, trivy,....

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: nuclei, bank-vaults, k8sgpt, rekor, cortex, timestamp-authority, tekton-pipelines, secrets-store-csi-driver-provider-azure, chezmoi, teleport, velero, gitlab-runner, py3-cassandra-medusa, restic, step, pulumi, airflow, hugo, goreleaser, zot, cert-manager, flux, trivy,....

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: wazero, node-problem-detector, gobuster, gitlab-shell, dagger, secrets-store-csi-driver-provider-azure, velero, gitlab-runner, kaf, regclient, prometheus-blackbox-exporter, nri-elasticsearch, scorecard, esbuild, kubernetes-dashboard-metrics-scraper, paranoia, task,...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner, k3d, falco, gke-gcloud-auth-plugin, wireguard-go, grpcurl, restic,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: wazero, node-problem-detector, gobuster, gitlab-shell, dagger, secrets-store-csi-driver-provider-azure, velero, gitlab-runner, kaf, regclient, prometheus-blackbox-exporter, nri-elasticsearch, scorecard, esbuild, kubernetes-dashboard-metrics-scraper, paranoia, task,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: wazero, node-problem-detector, gobuster, gitlab-shell, dagger, secrets-store-csi-driver-provider-azure, velero, gitlab-runner, kaf, regclient, prometheus-blackbox-exporter, nri-elasticsearch, scorecard, esbuild, kubernetes-dashboard-metrics-scraper, paranoia, task,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: wazero, node-problem-detector, gobuster, gitlab-shell, dagger, secrets-store-csi-driver-provider-azure, velero, gitlab-runner, kaf, regclient, prometheus-blackbox-exporter, nri-elasticsearch, scorecard, esbuild, kubernetes-dashboard-metrics-scraper, paranoia, task,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: bank-vaults, gobuster, gitlab-shell, secrets-store-csi-driver-provider-azure, rabbitmq-messaging-topology-operator, coredns, hugo, kubernetes-dashboard-metrics-scraper, terraform-provider-azurerm, nri-f5, prometheus-nats-exporter, dgraph, cert-manager-webhook-pdns,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: bank-vaults, croc, secrets-store-csi-driver-provider-azure, spqr, snyk-cli, gitlab-runner, kaf, regclient, coredns, containerd, scorecard, jitsucom-bulker, kubernetes-dashboard-metrics-scraper, flyte, paranoia, runc, gke-gcloud-auth-plugin, tempo,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: bank-vaults, node-problem-detector, gobuster, istio-pilot-agent, gitlab-shell, gitlab-runner, kaf, coredns, prometheus-blackbox-exporter, containerd, hugo, kubernetes-dashboard-metrics-scraper, runc, gke-gcloud-auth-plugin, kubescape, newrelic-infrastructure-agent,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: bank-vaults, gobuster, gitlab-shell, secrets-store-csi-driver-provider-azure, snyk-cli, rabbitmq-messaging-topology-operator, coredns, kubernetes-dashboard-metrics-scraper, terraform-provider-azurerm, nri-f5, prometheus-nats-exporter, dgraph,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, gobuster, metrics-server, cortex, helm-push, aws-flb-kinesis, configmap-reload, vertical-pod-autoscaler, grpcurl, sonobuoy, goreleaser, scorecard, cilium-envoy, kubernetes-dashboard-metrics-scraper, kind, falco, gke-gcloud-auth-plugin,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: bank-vaults, gobuster, gitlab-shell, secrets-store-csi-driver-provider-azure, snyk-cli, rabbitmq-messaging-topology-operator, coredns, kubernetes-dashboard-metrics-scraper, terraform-provider-azurerm, nri-f5, prometheus-nats-exporter, dgraph,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, gobuster, metrics-server, cortex, helm-push, aws-flb-kinesis, configmap-reload, vertical-pod-autoscaler, grpcurl, sonobuoy, goreleaser, scorecard, cilium-envoy, kubernetes-dashboard-metrics-scraper, kind, falco, gke-gcloud-auth-plugin,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, gobuster, metrics-server, cortex, helm-push, aws-flb-kinesis, configmap-reload, vertical-pod-autoscaler, grpcurl, sonobuoy, goreleaser, scorecard, cilium-envoy, kubernetes-dashboard-metrics-scraper, kind, falco, gke-gcloud-auth-plugin,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: bank-vaults, node-problem-detector, gobuster, gitlab-runner, kaf, coredns, prometheus-blackbox-exporter, containerd, hugo, kubernetes-dashboard-metrics-scraper, runc, gke-gcloud-auth-plugin, newrelic-infrastructure-agent, dgraph, prometheus-stackdriver-exporter,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow-katib, dynamic-localpv-provisioner, node-problem-detector, flux-notification-controller, metrics-server, secrets-store-csi-driver, src, cortex, terraform-provider-aws, kubevela, weaviate, coredns, prometheus-blackbox-exporter, kubernetes-csi-livenessprobe,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: node-problem-detector, gobuster, gitlab-shell, gitlab-runner, kaf, coredns, prometheus-blackbox-exporter, hugo, scorecard, gke-gcloud-auth-plugin, terraform-provider-azurerm, grype, kubescape, newrelic-infrastructure-agent, dgraph, prometheus-stackdriver-exporter,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: wazero, node-problem-detector, gobuster, gitlab-shell, dagger, secrets-store-csi-driver-provider-azure, velero, gitlab-runner, kaf, regclient, prometheus-blackbox-exporter, nri-elasticsearch, scorecard, esbuild, kubernetes-dashboard-metrics-scraper, paranoia, task,...