CVE-2024-47754

creationtimestamp| type| source ---|---|--- 2024-10-21 16:01:01+00:00| seen| https://t.me/cvedetector/8489...

CVE-2024-49856

creationtimestamp| type| source ---|---|--- 2024-10-21 16:00:48+00:00| seen| https://t.me/cvedetector/8480...

CVE-2024-47719

creationtimestamp| type| source ---|---|--- 2024-10-21 15:09:39+00:00| seen| https://t.me/cvedetector/8458...

CVE-2024-47717

creationtimestamp| type| source ---|---|--- 2024-10-21 15:09:37+00:00| seen| https://t.me/cvedetector/8456...

CVE-2024-10198

creationtimestamp| type| source ---|---|--- 2024-10-21 05:08:01+00:00| seen| https://t.me/cvedetector/8445...

CVE-2024-10197

creationtimestamp| type| source ---|---|--- 2024-10-21 04:17:56+00:00| seen| https://t.me/cvedetector/8443...

CVE-2024-48930

creationtimestamp| type| source ---|---|--- 2024-10-21 02:54:11+00:00| published-proof-of-concept| https://github.com/cryptocoinjs/secp256k1-node/security/advisories/GHSA-584q-6j8j-r5pm 2024-10-29 10:48:04+00:00| published-proof-of-concept| https://t.me/HackerArsenal/646 2024-10-30 07:05:32+00:00...

WordPress Google Docs RSVP Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Google Docs RSVP Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49672 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 41657f6782b9 Credits SOPROBRO Required...

WordPress DocumentPress Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software DocumentPress Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49656 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9ccb703f5e18 Credits Mika Required privilege Unauthenticate...

WordPress 3D Work In Progress Plugin <= 1.0.3 is vulnerable to Arbitrary File Upload

Software 3D Work In Progress Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49652 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 22382aa9215e Credits stealthcopter Required privilege...

WordPress Mags Theme <= 1.1.6 is vulnerable to Local File Inclusion

Software Mags Type Theme Vulnerable versions = 1.1.6 Fixed in 1.1.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-49701 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID e5bfc35540e7 Credits tahu.datar Required privilege Unauthenticated Publishe...

WordPress Product Filter by WBW Plugin <= 2.7.0 is vulnerable to SQL Injection

Software Product Filter by WBW Type Plugin Vulnerable versions = 2.7.0 Fixed in 2.7.1 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-49691 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 6688f0876dc2 Credits Hakiduck Required privilege Administrator...

WordPress News Kit Elementor Addons Plugin <= 1.2.1 is vulnerable to Sensitive Data Exposure

Software News Kit Elementor Addons Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-9541 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1aff69c2a359 Credits Nishiv Required...

Adobe FrameMaker Publishing Server 2020 < 2020 Update 3 / 2022 < 2022 Update 2 Security Feature Bypass (APSB24-10)

The version of Adobe FrameMaker Publishing Server installed on the remote Windows host is prior to Adobe FrameMaker Publishing Server Version 2020 prior to Update 3, or Version 2022 prior to Update 2. It is, therefore, affected by a vulnerability as referenced in the apsb24-10 advisory. - Adobe...

WordPress Smart Manager Plugin <= 8.45.0 is vulnerable to Broken Access Control

Software Smart Manager Type Plugin Vulnerable versions = 8.45.0 Fixed in 8.46.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-49687 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4f61d787da04 Credits Ananda Dhakal Patchstack...

WordPress Simple Custom Admin Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Simple Custom Admin Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49647 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3970364b5682 Credits Mika Required privilege...

Adobe Media Encoder < 14.0.3 Arbitrary Code Execution (APSB20-10) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 14.0.3. It is, therefore, affected by a vulnerability as referenced in the APSB20-10 advisory. - Adobe Media Encoder versions 14.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation could...

WordPress Qi Blocks Plugin <= 1.3.2 is vulnerable to Local File Inclusion

Software Qi Blocks Type Plugin Vulnerable versions = 1.3.2 Fixed in 1.3.3 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-49690 Patch priority Low CVSS severity Low 7.5 Developer Qode Interactive PSID a68a3ddba7fc Credits João Pedro S Alcântara Kinorth...

WordPress Banner Slider Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software Banner Slider Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49635 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 54728b0228c3 Credits João Pedro S Alcântara Kinorth Require...

WordPress Rover IDX Plugin <= 3.0.0.2903 is vulnerable to Broken Access Control

Software Rover IDX Type Plugin Vulnerable versions = 3.0.0.2903 Fixed in 3.0.0.2905 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10003 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 2b090aab193c Credits István Márton Required...