CVE-2024-33686 Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes

Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Extend Themes Colibri WP, Extend Themes Vertice.This issue affects Pathway: from n/a through 1.0.15; Hugo WP: from n/a through 1.0.8; Althea...

CVE-2024-33686: Missing Authorization

Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Extend Themes Colibri WP, Extend Themes Vertice.This issue affects Pathway: from n/a through 1.0.15; Hugo WP: from n/a through 1.0.8; Althea...

PT-2024-25441 · Extend Themes · Extend Themes Colibri Wp +6

Name of the Vulnerable Software and Affected Versions: Extend Themes Pathway versions 1.0.15 and earlier Extend Themes Hugo WP versions 1.0.8 and earlier Extend Themes Althea WP versions 1.0.13 and earlier Extend Themes Elevate WP versions 1.0.15 and earlier Extend Themes Brite versions 1.0.11 an...

CVE-2024-33688

Cross-Site Request Forgery CSRF vulnerability in Extend Themes Teluro.This issue affects Teluro: from n/a through 1.0.31...

CVE-2024-33688

Cross-Site Request Forgery CSRF vulnerability in Extend Themes Teluro.This issue affects Teluro: from n/a through 1.0.31...

CVE-2024-33688 WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Extend Themes Teluro.This issue affects Teluro: from n/a through 1.0.31...

CVE-2024-33688

Extend Themes Teluro WordPress theme, versions 1.0.0–1.0.31, are affected by a Cross-Site Request Forgery (CSRF) vulnerability. The issue allows unauthenticated or authenticated actions to be executed on behalf of a user (per Patchstack: unauthenticated privilege; user interaction required). Root...

PT-2024-25443 · Unknown · Extend Themes Teluro

Name of the Vulnerable Software and Affected Versions: Extend Themes Teluro versions 1.0.0 through 1.0.31 Description: A Cross-Site Request Forgery CSRF issue affects Extend Themes Teluro. This issue allows an attacker to perform unintended actions on a user's account. Recommendations: For versio...

CVE-2024-33688: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Extend Themes Teluro.This issue affects Teluro: from n/a through 1.0.31...

PT-2024-32213

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved by adding a missing NULL pointer check within the dpcd extend address range function. This issue could lead to an ASSERT if the retu...

CVE-2024-2904

Cross-Site Request Forgery CSRF vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33...

CVE-2024-2904

Cross-Site Request Forgery CSRF vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33...

CVE-2024-2904 WordPress Calliope theme <= 1.0.33 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33...

CVE-2024-2904

CVE-2024-2904 affects the WordPress Calliope theme (versions up to 1.0.33). The issue is a Cross-Site Request Forgery (CSRF) vulnerability in the Calliope theme, with PatchStack listing a fix in 1.0.35. Other sources corroborate the CSRF impact and affected range (

PT-2024-22692

Name of the Vulnerable Software and Affected Versions Extend Themes Calliope versions 1.0.33 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

CVE-2024-2904: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33...

DEBIAN-CVE-2021-47114

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption by fallocate When fallocate punches holes out of inode size, if original isize is in the middle of last cluster, then the part from isize to the end of the cluster will be zeroed with buffer write, at...

The vulnerability of the Object.prototype component of the Node.js programming platform’s extend module allows attackers to add or modify any properties of an object prototype.

The vulnerability of the Object.prototype component of the Node.js programming platform’s extend module is related to uncontrolled resource consumption. Exploiting this vulnerability allows an attacker to add or modify any properties of the object prototype at will...

CVE-2023-6988

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's extendbuilderrenderjs shortcode in all versions up to, and including, 1.0.239 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

PT-2024-15162 · WordPress · Colibri Page Builder

Name of the Vulnerable Software and Affected Versions: Colibri Page Builder plugin for WordPress versions up to, and including, 1.0.239 Description: The issue is related to Stored Cross-Site Scripting via the plugin's extend builder render js shortcode due to insufficient input sanitization and...