CVE-2024-37098

Server-Side Request Forgery SSRF vulnerability in Blossom Themes BlossomThemes Email Newsletter.This issue affects BlossomThemes Email Newsletter: from n/a through 2.2.6...

CVE-2024-37098

CVE-2024-37098: BlossomThemes Email Newsletter plugin contains an authenticated SSRF vulnerability affecting BlossomThemes Email Newsletter versions up to 2.2.6. Patch available to 2.2.7 (wording from PatchStack reference). Impact and exploit details are not elaborated in the provided documents b...

Malicious code in sq-themes (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3046 Malicious code in sq-themes (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sks-themes (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3021 Malicious code in sks-themes (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-37092

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0...

CVE-2024-37089

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0...

PT-2024-27288 · Stylemixthemes · Stylemixthemes Consulting Elementor Widgets

Name of the Vulnerable Software and Affected Versions: StylemixThemes Consulting Elementor Widgets versions 1.3.0 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability, in StylemixThemes...

The vulnerability of Themes component in the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of Themes component in the Windows operating system is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-37198

Cross-Site Request Forgery CSRF vulnerability in blazethemes Digital Newspaper.This issue affects Digital Newspaper: from n/a through 1.1.5...

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 10, 2024 to June 16, 2024)

Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Researchers can earn up to $10,400, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest...

WordPress Elegant Themes Icons plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Elegant Themes Icons versions = 1.3...

WordPress Shortcodes by United Themes plugin < 5.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Shortcodes by United Themes versions 5.0.5...

WordPress Elegant Themes Icons Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Elegant Themes Icons Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37100 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7527bc130697 Credits Ngô Thiên An ancorn from VNPT-VCI...

WordPress Shortcodes by United Themes Plugin < 5.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Shortcodes by United Themes Type Plugin Vulnerable versions 5.0.5 Fixed in 5.0.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37097 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6a3726b5a722 Credits Rafie Muhammad...

MAL-2024-1641 Malicious code in @wdpx/themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 027f3f6ecca8b2d2bd6a4d8c6b358eb1ea8ea1f094cfe3d2606095b6b17d822f The OpenSSF Package Analysis project identified '@wdpx/themes' @ 3.0.2 npm as malicious. It is considered malicious because: - The package...

CVE-2024-30065

Windows Themes Denial of Service Vulnerability...

CVE-2024-30065

Windows Themes Denial of Service Vulnerability...

CVE-2024-30065 Windows Themes Denial of Service Vulnerability

...