PT-2024-39082 · WordPress · Discount Rules For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress versions up to, and including, 2.6.5 Description: The issue is related to Reflected Cross-Site Scripting due t...

PT-2024-11041 · WordPress · Premium Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Premium Addons for Elementor versions up to, and including, 4.5.1 Premium Addons for Elementor versions prior to 2e5b3608-1dfc-468f-b3ae-12ce7c25ee6c Description: The issue is due to missing capability and nonce checks in the pa dismiss admin...

VulnCheck KEV: CVE-2021-4445

The Premium Addons for Elementor plugin for WordPress is vulnerable to Arbitrary Option Updates in versions up to, and including, 4.5.1. This is due to missing capability and nonce checks in the padismissadminnotice AJAX action. This makes it possible for authenticated subscriber+ attackers to...

VulnCheck KEV: CVE-2023-7286

The plugin ACF Quick Edit Fields for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.2.2. This makes it possible for attackers without the editusers capability to access metadata of other users, this includes contributor-level users and above...

BELL-CVE-2024-47662

Bulletin has no description...

BELL-CVE-2024-47663

Bulletin has no description...

PT-2024-6938

Name of the Vulnerable Software and Affected Versions GitLab EE versions 15.10 through 17.2.8 GitLab EE versions 17.3 through 17.3.4 GitLab EE versions 17.4 through 17.4.1 Description An issue has been discovered in GitLab EE that could allow a remote attacker to perform a Server-Side Request...

CVE-2024-9381

creationtimestamp| type| source ---|---|--- 2024-10-08 18:43:40+00:00| exploited| https://t.me/thehackernews/5704 2024-10-08 20:23:48+00:00| seen| https://t.me/cvedetector/7374 2024-10-10 08:32:47+00:00| seen| https://vulnerability.circl.lu/bundle/4828357e-5b9d-45d5-a952-da459107ce93 2024-10-30...

CVE-2024-8499

The Checkout Field Editor Checkout Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘renderreviewrequestnotice’ function in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possib...

WordPress Checkout Field Editor (Checkout Manager) for WooCommerce plugin <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice vulnerability

Reflected Cross-Site Scripting via renderreviewrequestnotice vulnerability discovered by vgo0 in WordPress Plugin Checkout Field Editor Checkout Manager for WooCommerce versions = 2.0.3...

CVE-2024-9228

The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-9228

Mode C: Details available. The CVE concerns the WordPress plugin Loggedin – Limit Active Logins, affected all versions up to 1.3.1. The vulnerability is Reflected Cross-Site Scripting caused by insufficient escaping in add_query_arg, exploitable by unauthenticated attackers when the user is shown...

BELL-CVE-2024-46869

Bulletin has no description...

PT-2024-39506 · WordPress · Loggedin – Limit Active Logins

Name of the Vulnerable Software and Affected Versions: Loggedin – Limit Active Logins plugin for WordPress versions up to, and including, 1.3.1 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows...

CVE-2024-9228: Improper Neutralization of Input During Web Page Generation

The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-28809

creationtimestamp| type| source ---|---|--- 2024-09-30 20:50:28+00:00| seen| https://t.me/cvedetector/6675 2024-10-01 16:38:54+00:00| seen| https://t.me/truesecator/6267...

Timeshare Owner? The Mexican Drug Cartels Want You

The FBI is warning timeshare owners to be wary of a prevalent telemarketing scam involving a violent Mexican drug cartel that tries to trick people into believing someone wants to buy their property. This is the story of a couple who recently lost more than $50,000 to an ongoing timeshare scam th...

CVE-2024-46733

creationtimestamp| type| source ---|---|--- 2024-09-18 10:01:20+00:00| seen| https://t.me/cvedetector/5908 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2024-44190

creationtimestamp| type| source ---|---|--- 2024-09-17 03:04:18+00:00| seen| https://t.me/cvedetector/5773...

Online Notice Board System 1.0 Arbitrary File Upload

============================================================================================================================================= | Title : Online Notice Board System project 1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozil...