CVE-2024-12701

CVE-2024-12701 affects the WordPress plugin WP Smart Import: Import any XML File to WordPress. The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw via the page parameter caused by insufficient input sanitization and output escaping. It affects all versions up to 1.1.2. The impact is ...

PT-2025-1929 · WordPress · Wp Smart Import

Name of the Vulnerable Software and Affected Versions: WP Smart Import : Import any XML File to WordPress plugin for WordPress versions up to, and including, 1.1.2 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input sanitization and...

WordPress WP Smart Import plugin <= 1.1.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin WP Smart Import versions = 1.1.2...

Smarts Smart Agent interface.php Page SQL Injection Vulnerability

Smarts Smart Agent is a powerful, flexible and scalable tool from Smarts for monitoring wireless network performance and services from the end user's perspective. An SQL injection vulnerability exists in Smarts Smart Agent v1.1.0, which stems from a lack of validation of externally entered SQL...

Huawei Myna Input Validation Error Vulnerability

Huawei Myna is a smart speaker from Chinese company Huawei Huawei. Huawei Myna suffers from an Input Validation Error vulnerability that originates from a module that does not adequately integrity check inputs in certain scenarios. An attacker can exploit this vulnerability to affect the normal...

PT-2026-29081

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.27.0 Description OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, providing a crafted input to the fuzz pkcs15 reader harness results in an out-of-bounds heap read within the...

CVE-2024-49687

Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through = 8.45.0...

Connected contraptions cause conniption for 2024

The holidays are upon us, which means now is the perfect time for gratitude, warmth, and—because modern society has thrust it upon us—gift buying. It’s Bluey and dig kits and LEGOs for kids, Fortnite and AirPods and backpacks for tweens, and, for an adult you particularly love, it’s televisions,...

CVE-2024-49687 WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through = 8.45.0...

CVE-2024-49687

CVE-2024-49687 : WordPress WordPress Smart Manager plugin (StoreApps)

CVE-2024-49687 WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through = 8.45.0...

CVE-2024-56031

Missing Authorization vulnerability in Yulio Aleman Jimenez Smart Shopify Product smart-shopify-product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Shopify Product: from n/a through = 1.0.2...

CVE-2024-56031

Missing Authorization vulnerability in Yulio Aleman Jimenez Smart Shopify Product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Shopify Product: from n/a through 1.0.2...

CVE-2024-56031 WordPress Smart Shopify Product plugin <= 1.0.2 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Yulio Aleman Jimenez Smart Shopify Product smart-shopify-product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Shopify Product: from n/a through = 1.0.2...

CVE-2024-56031

The CVE-2024-56031 relates to the WordPress plugin Smart Shopify Product (versions

PT-2024-33640 · Storeapps · Storeapps Smart Manager

Name of the Vulnerable Software and Affected Versions: StoreApps Smart Manager versions n/a through 8.45.0 Description: The issue is related to a Missing Authorization vulnerability in StoreApps Smart Manager. This allows for unauthorized access. Recommendations: For versions n/a through 8.45.0,...

WordPress plugin Smart Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress plugin Smart Shopify Product 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-36673 · Yulio Aleman Jimenez · Smart Shopify Product

Name of the Vulnerable Software and Affected Versions: Yulio Aleman Jimenez Smart Shopify Product versions 1.0.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This vulnerabilit...

Smadar SPS 加密问题漏洞

Smadar SPS is a smart digital archiving software from Smart Printing Solutions LTD. An encryption issue vulnerability exists in Smadar SPS version 4.0.44.0.64, which arises from the use of a corrupt or risky encryption algorithm...