CVE-2024-49698: Missing Authorization

Missing Authorization vulnerability in PriceListo Best Restaurant Menu by PriceListo best-restaurant-menu-by-pricelisto.This issue affects Best Restaurant Menu by PriceListo: from n/a through = 1.4.2...

PT-2024-33647 · Imw3 · My Wp Brand – Hide Menu & Hide Plugin

Name of the Vulnerable Software and Affected Versions: My Wp Brand – Hide menu & Hide Plugin versions 1.1.2 and below Description: A Missing Authorization vulnerability is present in the imw3 My Wp Brand – Hide menu & Hide Plugin. This issue allows for unauthorized access. Recommendations: For...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the admin/auth/menu and /admin/auth/extensions components due to improper user input sanitization. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicio...

CVE-2024-54775

Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting XSS vulnerability via /admin/auth/menu and /admin/auth/extensions...

CVE-2024-54775: Improper Neutralization of Input During Web Page Generation

Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting XSS vulnerability via /admin/auth/menu and /admin/auth/extensions...

Dcat Admin security vulnerabilities

Dcat Admin is a backend system builder based on the secondary development of laravel-admin by Jiang Qinghua. A security vulnerability exists in Dcat Admin v2.2.0-beta and v2.2.2-beta, which was discovered to contain a cross-site scripting vulnerability via /admin/auth/menu and...

PT-2024-16556 · WordPress · Full Screen Menu For Elementor

Name of the Vulnerable Software and Affected Versions: Full Screen Menu for Elementor plugin for WordPress versions up to, and including, 1.0.7 Description: The Full Screen Menu for Elementor plugin for WordPress has an Information Exposure issue due to insufficient restrictions on which posts ca...

WordPress plugin Full Screen Menu for Elementor has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-10797: Authorization Bypass Through User-Controlled Key

The Full Screen Menu for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.7 via the Full Screen Menu Elementor Widget due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers,...

Start menu may stop responding if December 2024 or newer security updates installed on Windows 11

Start menu within a Windows 11 VDI session may not respond for some users after installing Microsoft's December 2024 or newer security updates TPV-6122 Solution This issue is fixed in the Citrix Virtual Apps and Desktops 7 2503 and newer versions. If users are using LTSR or older versions of Citr...

WordPress Full Screen Menu for Elementor plugin <= 1.0.7 - Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Full Screen Menu for Elementor versions = 1.0.7...

PT-2024-27731 · Digiteam · Digiteam

Name of the Vulnerable Software and Affected Versions: Digiteam version 4.21.0.0 Description: The issue is related to improper access control in the endpoint "/RoleMenuMapping/AddRoleMenu" of Digiteam, allowing authenticated attackers to escalate privileges. Recommendations: For Digiteam version...

Digiteam security vulnerabilities

Digiteam is a sales digitization and gamification mobile solution from Digiteam, Inc. A security vulnerability exists in Digiteam version v4.21.0.0 that stems from improper access control in the endpoint /RoleMenuMapping/AddRoleMenu. An attacker can exploit the vulnerability to elevate privileges...

CVE-2024-54381

Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through = 3.1.1...

CVE-2024-54381 WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability

Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through = 3.1.1...

CVE-2024-54381

CVE-2024-54381 affects the WordPress plugin Advance Menu Manager (affected: v1.x and below; from n/a through 3.1.1). The issue is a Missing Authorization vulnerability that could allow an unauthenticated actor to perform a settings-change operation on the plugin. The Red Hat and Wordfence entries...

CVE-2024-52485

Missing Authorization vulnerability in Yudiz Solutions Ltd. WP Menu Image wp-menu-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Menu Image: from n/a through = 2.2...

WordPress plugin Advance Menu Manager has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-54381: Missing Authorization

Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through = 3.1.1...

PT-2024-35326 · WordPress · Wp Menu Image

Name of the Vulnerable Software and Affected Versions: WP Menu Image versions through 2.2 Description: The issue is related to a Missing Authorization vulnerability in WP Menu Image, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions throu...