WordPress Salon booking system Plugin <= 9.5 is vulnerable to Arbitrary File Upload

Software Salon booking system Type Plugin Vulnerable versions = 9.5 Fixed in 9.5.1 OWASP Top 10 A4: Insecure Design Classification Arbitrary File Upload CVE CVE-2024-30510 Patch priority Medium CVSS severity Medium 10 Developer Claim ownership PSID 17f873db702b Credits stealthcopter Required...

WordPress RegistrationMagic Plugin <= 5.3.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software RegistrationMagic Type Plugin Vulnerable versions = 5.3.0.0 Fixed in 5.3.1.0 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-2951 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1d9399326561 Credits Joshua Chan Required...

WordPress Formidable Registration Plugin < 2.12 is vulnerable to Broken Authentication

Software Formidable Registration Type Plugin Vulnerable versions 2.12 Fixed in 2.12 OWASP Top 10 A4: Insecure Design Classification Broken Authentication CVE CVE-2024-1290 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID de229a590aad Credits Scott Kingsley Clark...

WordPress Page Restrict Plugin <= 2.5.5 is vulnerable to Bypass Vulnerability

Software Page Restrict Type Plugin Vulnerable versions = 2.5.5 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-0682 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID e5dc30bc662f Credits Francesco Carlucci Required privilege...

WordPress Page Restriction WordPress (WP) Plugin <= 1.3.4 is vulnerable to Bypass Vulnerability

Software Page Restriction WordPress WP Type Plugin Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-0681 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cfef51f8afd9 Credits Francesco Carlucci...

WordPress WP Private Content Plus Plugin <= 3.6 is vulnerable to Bypass Vulnerability

Software WP Private Content Plus Type Plugin Vulnerable versions = 3.6 Fixed in 3.6.1 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-0680 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0b6db52774fe Credits Francesco Carlucci Required...

WordPress My Calendar Plugin <= 3.4.23 is vulnerable to Cross Site Scripting (XSS)

Software My Calendar Type Plugin Vulnerable versions = 3.4.23 Fixed in 3.4.24 OWASP Top 10 A4: Insecure Design Classification Cross Site Scripting XSS CVE CVE-2024-25916 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0654701560fd Credits Steven Julian Required privilege...

WordPress Anonymous Restricted Content Plugin <= 1.6.2 is vulnerable to Bypass Vulnerability

Software Anonymous Restricted Content Type Plugin Vulnerable versions = 1.6.2 Fixed in 1.6.3 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-0909 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3b50fe0358a1 Credits Francesco Carlucci...

WordPress Total Upkeep Plugin <= 1.15.8 is vulnerable to Arbitrary File Download

Software Total Upkeep Type Plugin Vulnerable versions = 1.15.8 Fixed in 1.15.9 OWASP Top 10 A4: Insecure Design Classification Arbitrary File Download CVE CVE-2024-24869 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 7a4ce347d2cf Credits Yudistira Arya Required privileg...

WordPress Photo Gallery by 10Web Plugin <= 1.8.19 is vulnerable to Directory Traversal

Software Photo Gallery by 10Web Type Plugin Vulnerable versions = 1.8.19 Fixed in 1.8.20 OWASP Top 10 A4: Insecure Design Classification Directory Traversal CVE CVE-2024-0221 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 29011d5256be Credits Bence Szalai Required privile...

WordPress Albo Pretorio Online Plugin <= 4.6.6 is vulnerable to Sensitive Data Exposure

Software Albo Pretorio Online Type Plugin Vulnerable versions = 4.6.6 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Sensitive Data Exposure CVE CVE-2024-22301 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0fb8cf117b5d Credits Muhammad Daffa Required...

WordPress WordPress Manutenção Plugin <= 1.0.6 is vulnerable to Bypass Vulnerability

Software WordPress Manutenção Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-22139 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID d419565972b3 Credits Brandon Roldan Required privile...

WordPress WPS Hide Login Plugin <= 1.9.11 is vulnerable to Bypass Vulnerability

Software WPS Hide Login Type Plugin Vulnerable versions = 1.9.11 Fixed in 1.9.12 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-49748 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID b95951ba6ec7 Credits Naveen Muthusamy Required privilege...

WordPress Product Feed Manager Plugin <= 7.3.15 is vulnerable to Directory Traversal

Software Product Feed Manager Type Plugin Vulnerable versions = 7.3.15 Fixed in 7.3.16 OWASP Top 10 A4: Insecure Design Classification Directory Traversal CVE CVE-2023-52144 Patch priority Low CVSS severity Low 5.5 Developer WPFunnels Team PSID 19683c0fecc1 Credits Muhammad Daffa Required privile...

WordPress BookingPress Plugin <= 1.0.74 is vulnerable to Other Vulnerability Type

Software BookingPress Type Plugin Vulnerable versions = 1.0.74 Fixed in 1.0.75 OWASP Top 10 A4: Insecure Design Classification Other Vulnerability Type CVE CVE-2023-51405 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID 5ed1a6f81388 Credits Abdi Pranata Required privilege...

WordPress Ultimate Dashboard Plugin <= 3.7.10 is vulnerable to Bypass Vulnerability

Software Ultimate Dashboard Type Plugin Vulnerable versions = 3.7.10 Fixed in 3.7.11 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-49822 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 9e9819724a52 Credits Naveen Muthusamy Required...

WordPress WP Child Theme Generator Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload

Software WP Child Theme Generator Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A4: Insecure Design Classification Arbitrary File Upload CVE CVE-2023-47873 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID e915ca3d162f Credits Dateoljo of BoB 12th...

WordPress LWS Hide Login Plugin <= 2.1.8 is vulnerable to Bypass Vulnerability

Software LWS Hide Login Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-47818 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 6d52db64950c Credits Naveen Muthusamy Required privilege...

Google Android Information Disclosure Vulnerability (CNVD-2024-02706)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by an insecure implementation/design in Scudo. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2023-21367

In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/design. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...