Roo Code 命令注入漏洞

Roo Code is an AI-based autonomous coding agent from Roo Code. A command injection vulnerability exists in Roo Code versions prior to 3.26.7 that stems from an authentication error and could lead to the execution of unauthorized commands...

Roo Code 操作系统命令注入漏洞

Roo Code is an AI-based autonomous coding agent from Roo Code. An operating system command injection vulnerability exists in Roo Code 3.26.6 and prior versions, which stems from workflows that do not clean up their inputs and could lead to remote code execution...

WordPress plugin WishList Member X Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

CVE-2024-37112

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7...

CVE-2024-37109

Improper Control of Generation of Code 'Code Injection' vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a before 3.26.7...

CVE-2024-37111

Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7...

CVE-2024-37107

Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This issue affects WishList Member X: from n/a before 3.26.7...

PT-2024-27307 · Unknown · Wishlist Member

Name of the Vulnerable Software and Affected Versions: WishList Member X versions prior to 3.26.7 Description: A Missing Authorization issue has been identified in the Membership Software WishList Member X. This issue may allow unauthorized access due to the lack of proper authorization checks...

WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability

Unauthenticated Database Backup Download vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WishList Member X versions 3.26.7...