WordPress Web To Print Shop : uDraw plugin <= 3.3.32 - Unauthenticated Arbitrary File Access vulnerability

Unauthenticated Arbitrary File Access vulnerability discovered by cydave in WordPress Web To Print Shop : uDraw plugin versions = 3.3.32. Solution Update the WordPress Web To Print Shop : uDraw plugin to the latest available version at least 3.3.33...

PT-2022-6718 · Adobe · Acrobat 2020 +2

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader DC versions 17.012.30205 and earlier Adobe Acrobat Reader DC versions 20.005.3031x and earlier Adobe Acrobat Reader DC versions 22.001.20085 and earlier Adobe Acrobat 2017 affected versions not specified Adobe Acrobat 202...

WordPress Easy Social Icons plugin <= 3.1.4 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered in WordPress Easy Social Icons plugin versions = 3.1.4. Solution Update the WordPress Easy Social Icons plugin to the latest available version at least 3.2.0...

pfSense-pkg-WireGuard vulnerable to directory traversal

Overview pfSense-pkg-WireGuard provided by pfSense is an add-on package for pfSense CE and pfSense Plus. pfSense-pkg-WireGuard contains a directory traversal vulnerability CWE-22. Yutaka WATANABE of Ierae Security Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

WordPress Date Picker by Input WP – Sync bookings with external Calendars (.ics) plugin <= 2.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Date Picker by Input WP – Sync bookings with external Calendars .ics plugin versions = 2.1. Solution Update the WordPress Date Picker by Input WP – Sync bookings with external Calendars .ics plugin to the latest available...

WordPress SV Media Library plugin < 1.8.01 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress SV Media Library plugin versions 1.8.01. Solution Update the WordPress SV Media Library plugin to the latest available version at least 1.8.01...

WordPress Modern Addons for Elementor Page Builder plugin <= 1.1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Modern Addons for Elementor Page Builder plugin versions = 1.1.2. Solution Update the WordPress Modern Addons for Elementor Page Builder plugin to the latest available version at least 1.2.0...

WordPress Files Download Delay plugin < 1.0.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Files Download Delay plugin versions 1.0.4. Solution Update the WordPress Files Download Delay plugin to the latest available version at least 1.0.4...

WordPress STAX Header Builder plugin < 1.3.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress STAX Header Builder plugin versions 1.3.6. Solution Update the WordPress STAX Header Builder plugin to the latest available version at least 1.3.6...

WordPress HM Multiple Roles plugin < 1.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress HM Multiple Roles plugin versions 1.6. Solution Update the WordPress HM Multiple Roles plugin to the latest available version at least 1.6...

WordPress Food Recipes plugin <= 2.1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Food Recipes plugin versions = 2.1.1. Solution Update the WordPress Food Recipes plugin to the latest available version at least 2.1.2...

WordPress FormsCRM plugin < 3.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress FormsCRM plugin versions 3.6. Solution Update the WordPress FormsCRM plugin to the latest available version at least 3.6...

WordPress Video Reviews / Video Widget plugin <= 1.2.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Video Reviews / Video Widget plugin versions = 1.2.2. Solution Update the WordPress Video Reviews / Video Widget plugin to the latest available version at least 1.2.3...

WordPress Ultimate SMS Notifications for WooCommerce plugin <= 1.8.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ultimate SMS Notifications for WooCommerce plugin versions = 1.8.1. Solution Update the WordPress Ultimate SMS Notifications for WooCommerce plugin to the latest available version at least 1.8.4...

WordPress Product Image Watermark for Woo plugin <= 1.0.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Product Image Watermark for Woo plugin versions = 1.0.3. Solution Update the WordPress Product Image Watermark for Woo plugin to the latest available version at least 1.0.4...

WordPress Image Carousel For Divi plugin <= 1.4.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Image Carousel For Divi plugin versions = 1.4.0. Solution Update the WordPress Image Carousel For Divi plugin to the latest available version at least 1.5.0...

WordPress Postmatic plugin <= 2.2.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Postmatic plugin versions = 2.2.8. Solution Update the WordPress Postmatic plugin to the latest available version at least 2.2.9...

WordPress Custom Product Type For WooCommerce plugin < 1.2.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Custom Product Type For WooCommerce plugin versions 1.2.0. Solution Update the WordPress Custom Product Type For WooCommerce plugin to the latest available version at least 1.2.0...

WordPress UltraAddons Elementor Lite plugin <= 1.1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress UltraAddons Elementor Lite plugin versions = 1.1.0. Solution Update the WordPress UltraAddons Elementor Lite plugin to the latest available version at least 1.1.1...

WordPress Lightbox – EverlightBox Gallery plugin <= 1.1.17 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Lightbox – EverlightBox Gallery plugin versions = 1.1.17. Solution Update the WordPress Lightbox – EverlightBox Gallery plugin to the latest available version at least 1.1.18...