WordPress plugin Superfly Responsive Menu has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

KB5001412: Setup Dynamic Update for Windows 10, version 2004 and 20H2: April 27, 2021

KB5001412: Setup Dynamic Update for Windows 10, version 2004 and 20H2: April 27, 2021 Applies To Windows 10 Enterprise, version 2004 Windows 10 Pro, version 2004 Windows 10 Home and Pro, version 2004 Windows 10 Enterprise and Education, version 2004 Windows 10 Pro Education, version 2004 Windows ...

April 12, 2016 — KB3147461 (OS Build 10240.16769)

April 12, 2016 — KB3147461 OS Build 10240.16769 Applies To Windows 10 This update includes quality improvements and security fixes. No new operating system features are being introduced in this update. Key changes include: Improved reliability for Windows Explorer, Bluetooth, application deployme...

October 27, 2016 — KB3197954 (OS Build 14393.351)

October 27, 2016 — KB3197954 OS Build 14393.351 Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Improved reliability of Interne...

September 13, 2016 — KB3185614 (OS Build 10586.589)

September 13, 2016 — KB3185614 OS Build 10586.589 Applies To Windows 10, version 1511, all editions This update includes quality improvements and security fixes. No new operating system features are being introduced in this update. Key changes include: Improved reliability of Internet Explorer 11...

CVE-2024-4090: Improper Neutralization of Input During Web Page Generation

The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredht...

CVE-2024-2508

The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savemenuitemicon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the 'mobmenuicon' post meta to...

CVE-2024-2508 WP Mobile Menu <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification

The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savemenuitemicon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the 'mobmenuicon' post meta to...

CVE-2024-2508

CVE-2024-2508 affects the WordPress plugin WP Mobile Menu (versions up to 2.8.4.4). The vulnerability arises from a missing capability check in the save_menu_item_icon function, enabling unauthenticated attackers to modify data by adding the post meta key '_mobmenu_icon' with a crafted value on a...

CVE-2024-2508 WP Mobile Menu <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification

The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savemenuitemicon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the 'mobmenuicon' post meta to...

WordPress WP Mobile Menu plugin <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification vulnerability

Missing Authorization to mobmenuicon Post Meta Modification vulnerability discovered by 1337Wannabe in WordPress Plugin WP Mobile Menu versions = 2.8.4.4...

CVE-2024-7277

A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unrestricted upload. The attack may be...

WordPress WP Mobile Menu Plugin <= 2.8.4.4 is vulnerable to Broken Access Control

Software WP Mobile Menu Type Plugin Vulnerable versions = 2.8.4.4 Fixed in 2.8.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2508 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a69747222ff0 Credits 1337Wannabe Required privileg...

CVE-2024-7277: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unrestricted upload. The attack may be...

PT-2024-20731 · WordPress · Wp Mobile Menu

Name of the Vulnerable Software and Affected Versions: WP Mobile Menu plugin for WordPress versions up to, and including, 2.8.4.4 Description: The issue allows unauthorized modification of data due to a missing capability check on the save menu item icon function. This makes it possible for...

WordPress plugin WP Mobile Menu has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-2508: Missing Authorization

The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savemenuitemicon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the 'mobmenuicon' post meta to...

CVE-2024-7277 itsourcecode Alton Management System Add a Menu menu.php unrestricted upload

A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unrestricted upload. The attack may be...

Itsourcecode Alton Management System code issues and vulnerabilities

itsourcecode Alton Management System is an online restaurant management system from itsourcecode. A code issue vulnerability exists in version 1.0 of itsourcecode Alton Management System, which stems from an unrestricted file upload vulnerability in the image function of the /admin/menu.php of th...

CVE-2024-41808: Improper Neutralization of Input During Web Page Generation

The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uploaded in a given log. However, all versions of the platform through 0.9.1 do not sanitize user input in the filter selection menu, which may result in complete account takeover. ...