CVE-2023-32587

Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...

CVE-2023-32587 WordPress WP Reactions Lite plugin <= 1.3.8 - Cross Site Request Forgery (CSRF)

A vulnerability in WP Reactions, LLC WP Reactions Lite wp-reactions-lite.This issue affects WP Reactions Lite: from n/a through = 1.3.8...

CVE-2023-32587 WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...

CVE-2023-46614

A vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite.This issue affects WP Helper Premium: from n/a through = 4.5.1...

WordPress Plugin WP Reactions Lite Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2023-23891 · WordPress · Wp Reactions Lite

Name of the Vulnerable Software and Affected Versions: WP Reactions Lite plugin versions 1.3.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the WP Reactions Lite plugin. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For WP...

kernel: Linux kernel UDPLITE: Denial of Service via null pointer dereference

A flaw was found in the Linux kernel's UDPLITE UDP-Lite implementation. A local user can exploit a null pointer dereference in the skmemraiseallocated function by using the IPPROTOUDPLITE protocol. This vulnerability can lead to a system crash, resulting in a denial of service DoS...

WordPress WooCommerce Product Table Lite Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Product Table Lite Type Plugin Vulnerable versions = 2.6.2 Fixed in 3.1.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47519 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b542742e54f8 Credits...

CVE-2023-46823

A vulnerability in Avirtum ImageLinks Interactive Image Builder imagelinks-interactive-image-builder-lite.This issue affects ImageLinks Interactive Image Builder: from n/a through = 1.5.4...

Exploit for CVE-2023-47179

CVE-2023-47179 WooODT Lite = 2.4.6 - Missing Authorization...

PT-2023-30346 · Byconsole · Byconsole Wooodt Lite

Name of the Vulnerable Software and Affected Versions: ByConsole WooODT Lite versions n/a through 2.4.6 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. This vulnerability can be exploit...

Amazon Linux 2 : libguestfs-winsupport (ALAS-2023-2332)

The version of libguestfs-winsupport installed on the remote host is prior to 7.2-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2332 advisory. An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G...

WordPress Finale Lite Plugin <= 2.16.0 is vulnerable to Arbitrary Content Deletion

Software Finale Lite Type Plugin Vulnerable versions = 2.16.0 Fixed in 2.17.0 OWASP Top 10 A5: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2023-47180 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID a89d6e226519 Credits Mika Required...

WordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Broken Access Control

Software WooODT Lite Type Plugin Vulnerable versions = 2.4.6 Fixed in 2.4.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47179 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 2fb9ad49f21d Credits Abdi Pranata Required privilege...

CVE-2023-44397

CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with matching/API/, which can cause a permission bypass. Version 1.4.1 contains a patch for this issue...

Design/Logic Flaw

CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with matching/API/, which can cause a permission bypass. Version 1.4.1 contains a patch for this issue...

CVE-2023-44397

CloudExplorer Lite (prior to v1.4.1) contains a permission bypass in its gateway filter. The issue is caused by a controller handling paths that start with matching/API/, enabling bypass of access controls. The CVE-2023-44397 entry notes a fix in v1.4.1. CVSS data indicates a high impact (possibl...

CVE-2023-44397 CloudExplorer Lite permission bypass vulnerability

CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with matching/API/, which can cause a permission bypass. Version 1.4.1 contains a patch for this issue...

CVE-2023-44397 CloudExplorer Lite permission bypass vulnerability

CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with matching/API/, which can cause a permission bypass. Version 1.4.1 contains a patch for this issue...