WordPress WP2LEADS Plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin WP2LEADS versions = 3.4.2...

PT-2024-36742 · Unknown · Editionguard For Woocommerce

Name of the Vulnerable Software and Affected Versions: EditionGuard for WooCommerce – eBook Sales with DRM versions 3.4.2 and earlier Description: A Cross-Site Request Forgery CSRF vulnerability has been identified, allowing Privilege Escalation. This issue affects the EditionGuard for WooCommerc...

CVE-2024-54407 WordPress CK and SyntaxHighlighter plugin <= 3.4.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in a328496647 CK and SyntaxHighlighter ck-and-syntaxhighlighter allows Stored XSS.This issue affects CK and SyntaxHighlighter: from n/a through = 3.4.2...

CVE-2024-54407

CVE-2024-54407 affects CK and SyntaxHighlighter plugins (CK and SyntaxHighlighter) with a CSRF-triggered Stored XSS vulnerability that affects versions up to 3.4.2. The root cause is a Cross-Site Request Forgery flaw that enables stored XSS in affected pages when an attacker can induce a user to ...

CVE-2024-54407 WordPress CK and SyntaxHighlighter plugin <= 3.4.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in a328496647 CK and SyntaxHighlighter ck-and-syntaxhighlighter allows Stored XSS.This issue affects CK and SyntaxHighlighter: from n/a through = 3.4.2...

WordPress plugin CK and SyntaxHighlighter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress CK and SyntaxHighlighter plugin <= 3.4.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin CK and SyntaxHighlighter versions = 3.4.2...

CVE-2024-53792

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kiboko Labs Watu Quiz allows SQL Injection.This issue affects Watu Quiz: from n/a through 3.4.2...

WordPress plugin Watu Quiz SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

PT-2024-27567 · Noptin · Noptin

Name of the Vulnerable Software and Affected Versions: Noptin versions through 3.4.2 Description: The issue is related to a Missing Authorization vulnerability in Noptin Newsletter, where functionality is not properly constrained by ACLs, allowing unauthorized access. Recommendations: For version...

WordPress plugin Noptin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-8549

The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.4.2. This makes it possible for unauthenticated attackers to inject...

PT-2024-39088 · Unknown · Simple Calendar – Google Calendar Plugin

Name of the Vulnerable Software and Affected Versions: The Simple Calendar – Google Calendar Plugin versions up to, and including, 3.4.2 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows...

WordPress Google Calendar Events plugin <= 3.4.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Google Calendar Events versions = 3.4.2...

PT-2024-11970 · Dell · Dell Repository Manager

Name of the Vulnerable Software and Affected Versions: Dell Repository Manager versions 3.4.2 and earlier Description: A local low privileged attacker may potentially exploit a Local Privilege Escalation Vulnerability in the Installation module, leading to the execution of arbitrary executables o...

PT-2024-28710 · Unknown · Tone Store App

Name of the Vulnerable Software and Affected Versions: TONE store App versions 3.4.2 and earlier Description: The issue is related to an unprotected primary channel in the TONE store App, which communicates with the TONE store website in cleartext. This could allow a man-in-the-middle attack,...

TONE Store Application Security Vulnerability

TONE Store Application is an application from TONE Japan that allows users to install and manage mobile applications. A security vulnerability exists in TONE Store Application version 3.4.2 and prior versions, which originates from a vulnerability that allows arbitrary applications to be installe...

WordPress Simple Newsletter Plugin – Noptin plugin <= 3.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Manab Jyoti Dowarah Patchstack Alliance in WordPress Plugin Noptin versions = 3.4.2...

CVE-2023-51667

Authentication Bypass by Spoofing vulnerability in FeedbackWP Rate my Post – WP Rating System allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Rate my Post – WP Rating System: from n/a through 3.4.2...

Security Bulletin: IBM Aspera Console has addressed a denial of service vulnerability (CVE-2024-27316)

Summary IBM Aspera Console is vulnerable to Apache HTTP Server denial of service vulnerability caused by the failure to check or limit the use of HTTP/2 CONTINUATION frames that can be sent within a single stream, a remote attacker could exploit this vulnerability to cause an out of memory OOM...