FireTail Unveils Free Access for All to Cutting-Edge API Security Platform

McLean, United States of America, 26th June 2024, CyberNewsWire...

BELL-CVE-2024-37356

Bulletin has no description...

CVE-2023-44148

CVE-2023-44148 affects the WordPress Astra Bulk Edit plugin (

CVE-2023-44151

The CVE-2023-44151 entry corresponds to a Broken Access Control vulnerability in the WordPress Pre-Publish Checklist plugin (versions ≤ 1.1.1). The root cause is missing authorization/authentication validation, enabling access control bypass related to the Pre-Publish Checklist feature. Affected ...

SUSE: Security Advisory (SUSE-SU-2024:1624-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-51376

Technical details (affected components, root cause, exact impact, and remediation) are not publicly available in the provided documents. Please monitor for updates from official advisories and CVE databases for CVE-2023-51376.

CVE-2023-51496

CVE-2023-51496 affects the WordPress WooCommerce Warranty Requests plugin (versions up to 2.2.7). The issue is a Missing Authorization vulnerability that could allow unauthorized access to warranty requests. CVSS v3.1 base metrics reported by NVD and PatchStack indicate a Medium severity impact (...

CVE-2024-26126

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by an Improper Input Validation (CWE-20) vulnerability (CVE-2024-26126) that could bypass security features and affect page integrity. The issue supports network access with low privileges and requires user interaction to exp...

CVE-2023-47828

CVE-2023-47828 affects the WordPress wpMandrill plugin. Public documents identify a Missing Authorization/Broken Access Control via getAjaxStats in wpMandrill versions up to and including 1.33, allowing authenticated users (subscriber level and above) to access mailing statistics. Affected softwa...

CVE-2023-51524

CVE-2023-51524 concerns the WordPress plugin weForms. The connected data confirms a Missing Authorization vulnerability in weForms versions up to and including 1.6.18, specifically related to an unauthorized export of form entries via the export_form_entries action. The issue is categorized with ...

CVE-2023-51526

CVE-2023-51526 is a Missing Authorization vulnerability in the WordPress plugin Simple Staff List (affected: up to version 2.2.4). The connected data confirm the issue arises from missing authorization for specific admin actions, notably via ajax_flush_rewrite_rules and staff_member_export, allow...

CVE-2023-51680

Summary: CVE-2023-51680 affects the WordPress plugin “Quotes for WooCommerce.” The root cause is missing authorization checks leading to Broken Access Control in AJAX actions. The vulnerability exists in versions up to and including 2.0.1 and can allow manipulation of quotes by authenticated user...

CVE-2023-48273

CVE-2023-48273 affects the WordPress plugin Preloader for Website (version

CVE-2023-52227

CVE-2023-52227 applies to the MailerLite – WooCommerce integration plugin for WordPress. A Missing Authorization/Broken Access Control issue exists due to missing capability checks on multiple functions, affecting versions up to and including 2.0.8. The vulnerability permits authenticated users w...

CVE-2023-51682

CVE-2023-51682 : Missing Authorization vulnerability in MC4WP (Mailchimp for WordPress) affecting MC4WP

CVE-2024-24703

CVE-2024-24703 is a Broken Access Control vulnerability in MultiVendorX Marketplace (WooCommerce). The issue arises from a missing authorization check that permits unauthenticated actors to perform data-modifying actions on the WC Marketplace <= 4.0.25. PatchStack lists the vulnerable versions...

CVE-2022-48578

CVE-2022-48578 affects macOS Monterey AppleScript handling. The information provided shows an out-of-bounds read issue addressed by improved bounds checking, fixed in macOS Monterey 12.5. The AppleScript processing could lead to unexpected termination or disclosure of process memory, indicating a...

CVE-2024-25092

CVE-2024-25092 is a Missing Authorization vulnerability in WordPress NextMove Lite (XLPlugins NextMove Lite) affecting all versions through 2.17.0. An authenticated user with subscriber-level privileges or higher can install and activate arbitrary plugins due to a missing capability check (xl_add...

CVE-2023-52230

CVE-2023-52230 affects Booster Plus for WooCommerce, where versions prior to 7.1.3 expose an authenticated arbitrary WordPress option disclosure due to missing authorization. The issue is a missing authorization vulnerability that could allow a user with at least subscriber privileges to view or ...

Fedora: Security Advisory for rust-uu_link (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...