CVE-2024-1287 Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi

The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking other users' sensitive information, including password hashes via an SQLi vector...

CVE-2024-1286 Paid Memberships Pro - Membership Maps Add On < 0.7 - Contributor+ Sensitive Information Disclosure

The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensitive information about users with a membership on the site...

PT-2024-29517 · Priority · Pri Web Portal Add-On For Priority Erp

Name of the Vulnerable Software and Affected Versions: PRI WEB Portal Add-On for Priority ERP on prem affected versions not specified Description: The issue concerns exposure of sensitive information to an unauthorized actor, as described by CWE-200. Recommendations: At the moment, there is no...

CVE-2023-47220

An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5...

CVE-2023-47220 Media Streaming add-on

An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5...

CVE-2023-47220

The CVE-2023-47220 issue affects the Media Streaming add-on prior to version 500.1.1.5. It describes an OS command injection vulnerability that could allow an authenticated administrator to execute commands over the network. The fixed release is Media Streaming add-on 500.1.1.5 (2024-01-22) and l...

Media Streaming add-on 操作系统命令注入漏洞

Media Streaming add-on is a media streaming add-on. An operating system command injection vulnerability exists in Media Streaming Add-on versions prior to 500.1.1.5 2024/01/22 , which stems from the presence of an operating system command injection vulnerability that allows an authenticated...

CVE-2023-47222

An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on...

CVE-2023-47222 Media Streaming add-on

An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on...

CVE-2023-47222

CVE-2023-47222 affects the Media Streaming add-on and is described as an exposure of sensitive information vulnerability that could allow a remote attacker to compromise system security over the network. The vulnerability impacts versions prior to 500.1.1.5, with a fix released in Media Streaming...

abstract-account-factory (>=0.13.0 <=0.16.1), abstract-adapter-utils (>=0.16.0 <=0.19.2) +415 more potentially affected by CVE-2024-58263 via cosmwasm-std (=1.3.4)

cosmwasm-std CARGO version =1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on cosmwasm-std and may be impacted: - abstract-account-factory =0.13.0, =0.16.0, =0.1.0, =0.0.1, =0.1.0, =0.2.0-beta.4, =0.2.0-beta.4, =0.13.0, =0.16.5, =0.2.0-beta.4,...

Paid Memberships Pro – Payfast Gateway Add On < 1.4.2 - Unauthenticated Information Exposure

Description The Paid Memberships Pro – Payfast Gateway Add On plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.1 via log files. This makes it possible for unauthenticated attackers to extract potentially sensitive information from log...

CVE-2024-30523

Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Mailchimp Add On pmpro-mailchimp.This issue affects Paid Memberships Pro – Mailchimp Add On: from n/a through 2.3.4...

CVE-2024-30523 WordPress Paid Memberships Pro – Mailchimp Add On plugin <= 2.3.4 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Mailchimp Add On pmpro-mailchimp.This issue affects Paid Memberships Pro – Mailchimp Add On: from n/a through 2.3.4...

CVE-2024-30523

Technical details about CVE-2024-30523 are not provided in the supplied documents. No affected product/version or remediation steps are disclosed here; monitor for official advisories for updates.

CVE-2024-30514

CVE-2024-30514 affects Paid Memberships Pro – Payfast Gateway Add On for WordPress, with the vulnerability described as an insertion of sensitive information into the log file. The issue affects the Payfast gateway add-on versions up to 1.4.1. The connected Red Hat entry reproduces the same descr...

403 Forbidden Message When Accessing Veeam Data Cloud App

Challenge Attempting to load the Veeam Data Cloud app webpage fails with the error: 403 Forbidden Microsoft-Azure-Application-Gateway/v2 Cause The HTTP status code "403 forbidden--you don't have permission to access this resource" is displayed when a web server recognizes a user's request but is...

CVE-2024-29130

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through 2.0...

CVE-2024-29130

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through 2.0...

CVE-2024-29130

CVE-2024-29130 is a Reflected XSS in the Contact Form 7 – PayPal & Stripe Add-on affecting versions up to 2.0. The issue allows input handling to generate a reflected script in a user’s browser. Wordfence entries confirm the vulnerability and note that a patched version/update is available; updat...