WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Broken Access Control

Software WordPress Social Login and Register Discord, Google, Twitter, LinkedIn Type Plugin Vulnerable versions = 7.5.14 Fixed in 7.6.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-24375 Patch priority Low CVSS severity Low 3.5 Developer Claim ownership...

WordPress Olevmedia Shortcodes Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Olevmedia Shortcodes Type Plugin Vulnerable versions = 1.1.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0168 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 576499d3655f Credits István Márton...

WordPress Advanced Form Integration Plugin <= 1.62.0 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Form Integration Type Plugin Vulnerable versions = 1.62.0 Fixed in 1.63.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47173 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5a9bad242990 Credits Team WeBoB...

November 8, 2022—KB5019964 (OS Build 14393.5501) - EXPIRED

None None...

ewhaklls.or.kr Cross Site Scripting vulnerability OBB-3168942

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

soeliot.or.kr Cross Site Scripting vulnerability OBB-3168938

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hknm.or.kr Cross Site Scripting vulnerability OBB-3168925

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bauumwelt.bremen.de Cross Site Scripting vulnerability OBB-3168082

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kokuen-zero.com Cross Site Scripting vulnerability OBB-3168079

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Post Views Count (Support caching plugins!) Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Post Views Count Support caching plugins! Type Plugin Vulnerable versions = 3.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4761 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 88e7e24c675b...

WordPress Ultimate Addons for Beaver Builder – Lite Plugin <= 1.5.5 is vulnerable to Broken Access Control

Software Ultimate Addons for Beaver Builder – Lite Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.5.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23882 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 952c840a7b12 Credits...

Oracle Business Intelligence Publisher (OBIEE) (Jan 2023 CPU)

The 5.9.0.0 and 6.4.0.0 versions of Oracle Business Intelligence Enterprise Edition installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2023 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component:...

WordPress Timed Content Plugin < 2.73 is vulnerable to Cross Site Scripting (XSS)

Software Timed Content Type Plugin Vulnerable versions 2.73 Fixed in 2.73 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0067 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 0d11099524d5 Credits István Márton Required...

total-myhouse.com Cross Site Scripting vulnerability OBB-3166715

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-0438

creationtimestamp| type| source ---|---|--- 2023-01-23 16:24:19+00:00| seen| https://t.me/cibsecurity/56829 2025-04-03 17:35:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10289...

majestic-resorts.com Cross Site Scripting vulnerability OBB-3166222

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

powo.science.kew.org Cross Site Scripting vulnerability OBB-3166175

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

About the security content of Safari 16.3

About the security content of Safari 16.3 This document describes the security content of Safari 16.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

WordPress Lightweight Accordion Plugin < 1.5.15 is vulnerable to Cross Site Scripting (XSS)

Software Lightweight Accordion Type Plugin Vulnerable versions 1.5.15 Fixed in 1.5.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0373 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 695900d7d8e2 Credits István Márto...

Oracle Enterprise Manager Ops Center UI and Other Patches (January 2022 CPU)

The 12.4.0.0 versions of Enterprise Manager Ops Center installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory. - Vulnerability in the Enterprise Manager Ops Center product of Oracle Enterprise Manager component: Networking JDBC. The...