CVE-2024-11104

The Sky Addons for Elementor Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the saveoptions...

PT-2024-16401 · WordPress · Wp Travel Engine

Name of the Vulnerable Software and Affected Versions: The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress versions prior to 6.2.2 Description: The issue is related to a missing capability check on the wpte onboard save function callback function, allowing...

PT-2025-2815

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a problem in the Linux kernel where the function stack depot save flags could potentially cause a deadlock when called from an NMI context. This happened because the...

CVE-2024-52726

CRMEB v5.4.0 is vulnerable to Arbitrary file read in the savebasics function which allows an attacker to obtain sensitive information...

PT-2024-35421 · Crmeb · Crmeb

Name of the Vulnerable Software and Affected Versions: CRMEB version 5.4.0 Description: The issue allows an attacker to obtain sensitive information through an arbitrary file read in the save basics function. Recommendations: For CRMEB version 5.4.0, consider restricting access to the save basics...

CVE-2024-52726

The ZhongBangKeJi CRMEB open source e-commerce management system, specifically version 5.4.0 , is vulnerable to an arbitrary file read vulnerability. The flaw exists within the save_basics function, which can be exploited by an attacker to obtain sensitive information . At this time, no updated v...

WordPress plugin Sky Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

CVE-2022-43933 configuration secrets are logged in support-save

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords...

PT-2024-17131

Name of the Vulnerable Software and Affected Versions The Sky Addons for Elementor plugin for WordPress versions up to, and including, 2.6.1 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the save options function. This allows...

WordPress plugin WIP Incoming Lite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2024-16766

Name of the Vulnerable Software and Affected Versions The Sky Addons for Elementor plugin for WordPress versions up to, and including, 2.6.2 Description The issue allows unauthorized modification of data, potentially leading to a denial of service, due to a missing capability check on the save...

CVE-2024-10891

The Save as PDF Plugin by Pdfcrowd plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'saveaspdfpdfcrowd' shortcode in all versions up to, and including, 4.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-10891

The Save as PDF Plugin by Pdfcrowd plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'saveaspdfpdfcrowd' shortcode in all versions up to, and including, 4.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

WordPress plugin Save as PDF Plugin by Pdfcrowd 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

PT-2024-16624 · Pdfcrowd · Save As Pdf Plugin

Name of the Vulnerable Software and Affected Versions: Save as PDF Plugin by Pdfcrowd versions up to, and including, 4.2.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'save as pdf pdfcrowd' shortcode due to insufficient input sanitization and output escaping ...

PT-2024-16974

Name of the Vulnerable Software and Affected Versions WIP Incoming Lite plugin for WordPress versions up to, and including, 1.1.1 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the save option function. This allows unauthenticated...

CVE-2024-10891: Improper Neutralization of Input During Web Page Generation

The Save as PDF Plugin by Pdfcrowd plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'saveaspdfpdfcrowd' shortcode in all versions up to, and including, 4.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

WordPress Save as PDF Plugin by Pdfcrowd plugin <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Save as PDF versions = 4.2.1...

CVE-2024-49689 WordPress HD Quiz – Save Results Light plugin <= 0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Results Light: from n/a through = 0.5...

CVE-2024-49689

CVE-2024-49689 is a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin HD Quiz – Save Results Light (versions ≤ 0.5). The issue arises from incorrectly configured access control levels, enabling unauthorized access due to a broken authorization boundary. CVSS v3.1...