801 matches found
CVE-2024-23820 OpenFGA DoS
OpenFGA, an authorization/permission engine, is vulnerable to a denial of service attack in versions prior to 1.4.3. In some scenarios that depend on the model and tuples used, a call to ListObjects may not release memory properly. So when a sufficiently high number of those calls are executed, t...
OpenFGA Security Vulnerabilities
OpenFGA is OpenFGA's high performance and flexible authorization/licensing engine built for developers and inspired by Google Zanzibar. A security vulnerability exists in OpenFGA versions prior to 1.4.3, which stems from the fact that in certain scenarios that depend on the model and tuple used,...
CVE-2023-51408
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StudioWombat WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce.This issue affects WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce: from n/a through 1.4.3...
CVE-2023-52204
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Javik Randomize.This issue affects Randomize: from n/a through 1.4.3...
CVE-2023-52204 WordPress Randomize Plugin <= 1.4.3 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Javik Randomize.This issue affects Randomize: from n/a through 1.4.3...
PT-2024-14116 · WordPress · Wp Optin Wheel
Name of the Vulnerable Software and Affected Versions: WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce versions 1.4.3 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This affects the WP Optin Wheel...
CVE-2023-52126
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Suman Bhattarai Send Users Email.This issue affects Send Users Email: from n/a through 1.4.3...
PT-2024-14423 · Unknown · Send Users Email
Name of the Vulnerable Software and Affected Versions: Send Users Email versions 1.4.3 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This affects the Send Users Email functionality. Recommendations: For versions 1.4.3 and earlier,...
WordPress WordPress Backup & Migration Plugin <= 1.4.3 is vulnerable to Broken Access Control
Software WordPress Backup & Migration Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-52183 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e20ae588b69a Credits Abdi Pranata...
WordPress Event Management Tickets Booking Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)
Software Event Management Tickets Booking Type Plugin Vulnerable versions = 1.4.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47525 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID da5590e03010 Credits Jeongwoo-LeeRoronoa...
VulnCheck KEV: CVE-2022-0482
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3...
CVE-2023-3962
The Winters theme for WordPress is vulnerable to Reflected Cross-Site Scripting via prototype pollution in versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...
PT-2023-27038 · WordPress · Winters Theme
Name of the Vulnerable Software and Affected Versions: Winters theme for WordPress versions up to, and including, 1.4.3 Description: The issue is related to Reflected Cross-Site Scripting via prototype pollution due to insufficient input sanitization and output escaping. This allows unauthenticat...
WordPress Plugin Winters Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
CVE-2023-34173
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alexander Semikashev Yandex Metrica Counter plugin = 1.4.3 versions...
CVE-2023-34173
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alexander Semikashev Yandex Metrica Counter plugin = 1.4.3 versions...
PT-2023-27521 · Ironic +2 · Ironic +2
Name of the Vulnerable Software and Affected Versions: ironic-image versions prior to capm3-v1.4.3 Description: The issue arises when Ironic is not deployed with TLS and does not have API and Conductor split into separate services, resulting in unprotected access to the API. By default, Ironic AP...
GHSA-7VXC-Q7RV-QFJ8 SUCHMOKUO node-worker-threads-pool denial of service Vulnerability
An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3 that allows attackers to cause a denial of service. This can be mitigated by manually creating a timeout. For example: ts const StaticPool = require"node-worker-threads-pool"; const staticPool = new...
