WordPress PageLayer Plugin < 1.7.7 is vulnerable to Cross Site Scripting (XSS)

Software PageLayer Type Plugin Vulnerable versions 1.7.7 Fixed in 1.7.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4687 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a2e6d35b385c Credits Marc Montpas Required...

CVE-2023-45683

creationtimestamp| type| source ---|---|--- 2023-10-16 22:32:08+00:00| published-proof-of-concept| https://t.me/cibsecurity/72333 2023-11-16 09:35:57+00:00| published-proof-of-concept| Telegram/vuWXEb781PTnis5daIIk2fJtuE2-VWVDhkIncIF84Nfyjg 2026-04-10 17:08:55+00:00| seen|...

CVE-2023-45690

creationtimestamp| type| source ---|---|--- 2023-10-16 20:32:05+00:00| seen| https://t.me/cibsecurity/72326 2023-10-17 15:31:27+00:00| seen| https://t.me/truesecator/4972...

CVE-2023-45686

creationtimestamp| type| source ---|---|--- 2023-10-16 20:32:02+00:00| seen| https://t.me/cibsecurity/72325 2023-10-17 15:31:27+00:00| seen| https://t.me/truesecator/4972...

CVE-2022-48612

creationtimestamp| type| source ---|---|--- 2023-10-16 07:41:23+00:00| seen| https://t.me/cibsecurity/72299 2024-02-17 11:36:39+00:00| seen| https://t.me/ctinow/186874...

Debian DSA-5527-1 : webkit2gtk - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5527 advisory. The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-39928 Marcin Noga discovered that a specially crafted web page can...

CVE-2023-45242

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35739, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2023-45242

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35739, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2023-26239

creationtimestamp| type| source ---|---|--- 2023-10-05 07:17:21+00:00| seen| https://t.me/cibsecurity/71655...

CVE-2023-44210

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 29258, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

SUSE CVE-2023-35074

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

CVE-2023-38433

creationtimestamp| type| source ---|---|--- 2023-09-28 12:51:59+00:00| seen| https://t.me/cibsecurity/67294 2023-11-13 19:18:36+00:00| seen| https://t.me/arpsyndicate/159 2025-08-17 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-08-17 2025-08-19 21:02:32+00:00| seen...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary updates...

CVE-2022-2990 affecting package buildah for versions less than 1.18.0-17

CVE-2022-2990 affecting package buildah for versions less than 1.18.0-17. A patched version of the package is available...

CVE-2023-41995

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-41980

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to bypass Privacy preferences...

CVE-2023-41981

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations...

CVE-2023-41068

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7. A user may be able to elevate privileges...

CVE-2023-41174

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-41074

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...