WordPress plugin PowerPack Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin TranslatePress versions = 2.9.6...

CVE-2024-1560

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the deleteartifactmlflowartifacts handler and localfileuritopath function, allowing for...

WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability

Arbitrary File Read vulnerability discovered by l8BL in WordPress Plugin WP Ultimate Exporter versions = 2.9...

WordPress plugin WP Ultimate Exporter 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

PT-2025-4667 · Unknown · Hirehive Job Plugin

Name of the Vulnerable Software and Affected Versions: HireHive Job Plugin versions prior to 2.9.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

PT-2024-16993 · WordPress · Scancircle

Name of the Vulnerable Software and Affected Versions: ScanCircle plugin for WordPress versions up to, and including, 2.9.2 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's scancircle shortcode. This allows...

laravel-filemanager 代码注入漏洞

laravel-filemanager is an open source tool from UniSharp. A security vulnerability exists in laravel-filemanager versions prior to 2.9.1 that stems from vulnerability to remote code execution attacks and allows attackers to execute malicious code...

PT-2024-36532 · Unknown · Avenwu Whistle

Name of the Vulnerable Software and Affected Versions: Avenwu Whistle versions 2.9.90 and earlier Description: The issue allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine. This is due to a Cross-Site Request Forgery CSRF flaw...

PT-2024-39445 · WordPress · Qs Dark Mode Plugin

Name of the Vulnerable Software and Affected Versions: QS Dark Mode Plugin for WordPress versions up to, and including, 2.9 Description: The QS Dark Mode Plugin for WordPress has a Stored Cross-Site Scripting issue via SVG file uploads due to insufficient input sanitization and output escaping...

WordPress plugin QS Dark Mode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Michael Patchstack Alliance in WordPress Theme Create versions = 2.9.1...

WordPress plugin ListingPro SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress Tooltip for Gravity Forms plugin <= 2.9 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin Tooltip for Gravity Forms versions = 2.9...

CVE-2023-37869

Missing Authorization vulnerability in Premium Addons Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0...

CVE-2023-36695

Missing Authorization vulnerability in Maxime Schoeni Sublanguage.This issue affects Sublanguage: from n/a through 2.9...

Apache Airflow Security Vulnerability

Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache USA Foundation. The platform is characterized by scalability and dynamic monitoring. A security vulnerability exists in Apache Airflow versions prior to 2.9.2 that stems from Airflow not...

dnsmasq Security Vulnerabilities

dnsmasq is a lightweight DNS forwarding and DHCP and TFTP server written in C. It has a security vulnerability in dnsmasq 2.9. A security vulnerability exists in dnsmasq version 2.9, which stems from the presence of an integer overflow vulnerability via forwardquery...

PT-2024-31286 · WordPress · Awesome Contact Form7

Name of the Vulnerable Software and Affected Versions: Awesome Contact Form7 for Elementor plugin for WordPress versions up to, and including, 2.9 Description: The issue is related to Stored Cross-Site Scripting via the 'AEP Contact Form 7' widget due to insufficient input sanitization and output...

Intel FPGA 安全漏洞

Intel FPGA products is a family of software applications from Intel Corporation USA. A security vulnerability exists in Intel FPGA prior to version 2.9.0 that stems from an out-of-bounds write issue. It could lead to privilege escalation and information disclosure...