WordPress Advanced Ads plugin <= 1.52.1 - Authenticated (Admin+) PHP Object Injection vulnerability

Authenticated Admin+ PHP Object Injection vulnerability discovered by ST in WordPress Plugin Advanced Ads versions = 1.52.1...

WordPress Advanced Ads plugin <= 1.52.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Ad Widget vulnerability discovered by wesley wcraft in WordPress Plugin Advanced Ads versions = 1.52.1...

hw: amd: Instruction raise #VC exception at exit

A vulnerability was found in AMD SEV-SNP, where a malicious hypervisor can potentially break confidentiality and integrity of SEV-SNP on Linux guests by injecting interrupts. An attacker can inject interrupt 0x80, which is used by Linux for legacy 32-bit system calls, and arbitrarily change the...

ai-agents (>=0.0.2, <=0.0.3), autotrain-advanced (>=0.6.15, <=0.6.31) potentially affected by CVE-2024-34511 via gradio (3.39.0)

gradio PYPI version 3.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - ai-agents =0.0.2, =0.6.15, =0.6.31 Source cves: CVE-2024-34511 Source advisory: OSV:GHSA-34RF-P3R3-58X2...

ai-agents (>=0.0.2, <=0.0.3), autotrain-advanced (>=0.6.15, <=0.6.31) potentially affected by CVE-2024-34510 via gradio (3.39.0)

gradio PYPI version 3.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - ai-agents =0.0.2, =0.6.15, =0.6.31 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

autotrain-advanced (>=0.6.32, <=0.7.63) potentially affected by CVE-2024-34510 via gradio (3.41.0)

gradio PYPI version 3.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autotrain-advanced =0.6.32, =0.7.63 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

autotrain-advanced (>=0.6.14, <=0.6.15.dev0), llama2-wrapper (>=0.1.0, <=0.1.14) potentially affected by CVE-2024-34511 via gradio (3.37.0)

gradio PYPI version 3.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autotrain-advanced =0.6.14, =0.1.0, =0.1.14 Source cves: CVE-2024-34511 Source advisory: OSV:GHSA-34RF-P3R3-58X2...

autotrain-advanced (>=0.6.14, <=0.6.15.dev0), llama2-wrapper (>=0.1.0, <=0.1.14) potentially affected by CVE-2024-34510 via gradio (3.37.0)

gradio PYPI version 3.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autotrain-advanced =0.6.14, =0.1.0, =0.1.14 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

autotrain-advanced (>=0.6.32, <=0.7.63) potentially affected by CVE-2024-34511 via gradio (3.41.0)

gradio PYPI version 3.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autotrain-advanced =0.6.32, =0.7.63 Source cves: CVE-2024-34511 Source advisory: OSV:GHSA-34RF-P3R3-58X2...

ai-agents (>=0.0.2, <=0.0.3), autotrain-advanced (>=0.6.15, <=0.6.31) potentially affected by CVE-2024-34510 via gradio (3.39.0)

gradio PYPI version 3.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - ai-agents =0.0.2, =0.6.15, =0.6.31 Source cves: CVE-2024-34510 Source advisory: OSV:PYSEC-2024-255...

autotrain-advanced (>=0.6.14, <=0.6.15.dev0), llama2-wrapper (>=0.1.0, <=0.1.14) potentially affected by CVE-2024-34510 via gradio (3.37.0)

gradio PYPI version 3.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autotrain-advanced =0.6.14, =0.1.0, =0.1.14 Source cves: CVE-2024-34510 Source advisory: OSV:PYSEC-2024-255...

autotrain-advanced (>=0.6.32, <=0.7.63) potentially affected by CVE-2024-34510 via gradio (3.41.0)

gradio PYPI version 3.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autotrain-advanced =0.6.32, =0.7.63 Source cves: CVE-2024-34510 Source advisory: OSV:PYSEC-2024-255...

DEBIAN-CVE-2022-48698

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix memory leak when using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. Fix this up by properly calling dput...

Google Announces Passkeys Adopted by Over 400 Million Accounts

Google on Thursday announced that passkeys are being used by over 400 million Google accounts, authenticating users more than 1 billion times over the past two years. "Passkeys are easy to use and phishing resistant, only relying on a fingerprint, face scan or a pin making them 50% faster than...

CVE-2024-3500

The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot, and Advanced Toggle widgets. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute...

CVE-2024-3500

The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot, and Advanced Toggle widgets. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute...

CVE-2024-0908

The Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the apbPosts function hooked via an AJAX action in all versions up to, and including, 1.13.4. This makes it possible...

WordPress Plugin ElementsKit Pro has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-1797: Improper Neutralization of Special Elements used in an SQL Command

The WP ULike – Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable to SQL Injection via the 'status' and 'id' attributes of the 'wpulikecounter' and 'wpulike' shortcodes in all versions up to, and including, 4.6.9 due to insufficient escaping on the user supplied paramete...

PT-2024-15912 · WordPress · The Advanced Post Block – Display Posts

Name of the Vulnerable Software and Affected Versions: The Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page plugin for WordPress versions up to, and including, 1.13.1 Description: The issue is related to unauthorized access of data due to a missing capability check on the...