WordPress plugin Radio Player Shoutcast 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Radio Player Shoutcast & Icecast versions = 4.4.7...

Fedora 41 : wireshark (2025-8043d4cd71)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8043d4cd71 advisory. New version 4.4.7 ---- Ignoring potential error when using udevadm in %post scriptlet Tenable has extracted the preceding description block directly...

CVE-2025-47667

Cross-Site Request Forgery CSRF vulnerability in qusupport LiveAgent liveagent allows Cross Site Request Forgery.This issue affects LiveAgent: from n/a through = 4.4.7...

CVE-2025-47667

Cross-Site Request Forgery CSRF vulnerability in qusupport LiveAgent liveagent allows Cross Site Request Forgery.This issue affects LiveAgent: from n/a through = 4.4.7...

CVE-2025-47667 WordPress LiveAgent <= 4.4.7 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in qusupport LiveAgent allows Cross Site Request Forgery. This issue affects LiveAgent: from n/a through 4.4.7...

WordPress plugin LiveAgent 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

Low: Red Hat Security Advisory: ACS 4.4 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. The updated image includes a security fix. This release of ACS 4.4.7 provides the following security fix: cross-spawn: Regular expression denial of service CVE-2024-21538...

WordPress AppPresser Plugin <= 4.4.6 is vulnerable to Privilege Escalation

Software AppPresser Type Plugin Vulnerable versions = 4.4.6 Fixed in 4.4.7 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-11024 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 25ae1391ba68 Credits shaman0x01...

RHSA-2021:3235 Red Hat Security Advisory: Red Hat Virtualization Host security and bug fix update [ovirt-4.4.7]

Bulletin has no description...

RHSA-2021:2866 Red Hat Security Advisory: RHV Engine and Host Common Packages security update [ovirt-4.4.7]

Bulletin has no description...

Joomla! 3.x < 3.10.17 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.10.17, 4.x prior to 4.4.7 or 5.x prior to 5.1.3. It is, therefore, affected by multiple vulnerabilities. - The stripImages and stripIframes methods didn't properly process inputs,...

Joomla! Multiple Vulnerabilities (20240803, 20240804)

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

WordPress Church Admin Plugin <= 4.4.6 is vulnerable to Arbitrary File Upload

Software Church Admin Type Plugin Vulnerable versions = 4.4.6 Fixed in 4.4.7 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-37418 Patch priority High CVSS severity High 9.9 Developer Andy Moyle PSID 3fae9e77c92b Credits Peng Zhou Required privilege Subscriber Publish...

AZL-45372 CVE-2024-4855 affecting package wireshark for versions less than 4.4.7-1

Use after free issue in editcap could cause denial of service via crafted capture file...

CVE-2023-6805

CVE-2023-6805 affects RSS Aggregator by Feedzy (WordPress). It allows Blind SSRF via fetch_feed, enabling authenticated users withContributor+ to reach arbitrary external/internal locations and modify internal data. Fixed in 4.4.7 (contributor) and 4.4.8 (author); remediation is to upgrade to the...

WordPress Plugin feedzy-rss-feeds 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

AZL-37057 CVE-2023-6174 affecting package wireshark for versions less than 4.4.7-1

SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file...

CVE-2023-43984

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

PT-2023-29059 · Smartisoft · Advancedexport

Name of the Vulnerable Software and Affected Versions: Smart Soft advancedexport versions prior to 4.4.7 Description: The issue is related to insecure permissions in the advancedexport module, allowing unauthenticated attackers to download user information from the ps customer table...