CVE-2024-55978: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...

PT-2024-36630

Name of the Vulnerable Software and Affected Versions Code Generator Pro versions n/a through 1.2 Description The issue is related to improper neutralization of special elements used in an SQL command, which allows SQL injection. This is a type of attack where an attacker can inject malicious SQL...

PT-2024-36250

Name of the Vulnerable Software and Affected Versions: Spartac Feedpress Generator versions 1.2.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicio...

PT-2024-36653 · Unknown · Marco Giannini Xml Multilanguage Sitemap Generator

Name of the Vulnerable Software and Affected Versions: Marco Giannini XML Multilanguage Sitemap Generator versions 2.0.6 and earlier Description: The issue is related to a missing authorization vulnerability in the Marco Giannini XML Multilanguage Sitemap Generator. This vulnerability affects the...

WordPress Plugin Code Generator Pro has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin XML Multilanguage Sitemap Generator versions = 2.0.6...

WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Code Generator Pro versions = 1.2...

CVE-2023-38477

Missing Authorization vulnerability in stasionok QR code MeCard/vCard generator wp-qrcode-me-v-card allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through = 1.6.0...

CVE-2023-38477

Missing Authorization vulnerability in Stanislav Kuznetsov QR code MeCard/vCard generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through 1.6.0...

SonicWALL SMA100 Encryption Issue Vulnerability

The SonicWALL SMA100 is a secure access gateway appliance from SonicWALL USA. The SonicWALL SMA100 suffers from a cryptographic issue vulnerability that stems from the use of a weakly encrypted pseudo-random number generator in the backup code generator. An attacker could exploit the vulnerabilit...

CVE-2023-38477: Missing Authorization

Missing Authorization vulnerability in Stanislav Kuznetsov QR code MeCard/vCard generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through 1.6.0...

PT-2024-12729

Name of the Vulnerable Software and Affected Versions WordPress QR Code MeCard/VCard Generator Plugin versions 1.5.6 through 1.6.0 Description A high-severity issue affects the QR code MeCard/vCard generator, allowing broken access control due to missing authorization. This issue can be exploited...

media: v4l2-tpg: prevent the risk of a division by zero

...

CVE-2024-11709

CVE-2024-11709 concerns the WordPress plugin AI Post Generator | AutoWriter. The vulnerability stems from a missing capability check on the ai_post_generator_delete_Post AJAX action, affecting all versions up to 3.5. The flaw enables authenticated attackers with Contributor-level access or higher...

CVE-2024-11709 AI Post Generator | AutoWriter <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion

The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aipostgeneratordeletePost AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated attackers, with...

CVE-2024-11709 AI Post Generator | AutoWriter <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion

The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aipostgeneratordeletePost AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated attackers, with...

WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.5 - Arbitrary File Read vulnerability

Arbitrary File Read vulnerability discovered by thiennv in WordPress Plugin PDF Generator Addon for Elementor Page Builder versions = 1.7.5...

WordPress AI Post Generator | AutoWriter plugin <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion vulnerability

Missing Authorization to Authenticated Contributor+ Post/Page Deletion vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin AI Post Generator | AutoWriter versions = 3.5...

CVE-2024-11709: Missing Authorization

The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aipostgeneratordeletePost AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated attackers, with...

PT-2024-17198

Name of the Vulnerable Software and Affected Versions AI Post Generator | AutoWriter plugin for WordPress versions up to, and including, 3.5 Description The issue is related to a missing capability check on the ai post generator delete Post AJAX action. This allows authenticated attackers with...