825 matches found
WordPress Justified Image Grid plugin <= 4.6.1 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Justified Image Grid versions = 4.6.1...
Hydra 安全漏洞
Hydra is a Nix open source continuous integration service based on the Nix project. A security vulnerability exists in Hydra that stems from an evaluation that can be triggered in Hydra without any authentication...
WordPress Hide My Site plugin <= 2.2 - Unauthenticated Information Exposure vulnerability
Unauthenticated Information Exposure vulnerability discovered by Colin Xu in WordPress Plugin Hide My Site versions = 2.2...
$4,998 Bounty Awarded and 100,000 WordPress Sites Protected Against Unauthenticated Remote Code Execution Vulnerability Patched in GiveWP WordPress Plugin
📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Through October 14th, researchers can earn up to $31,200, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, an...
WordPress WP BackItUp plugin <= 1.50 - Unauthenticated Broken Access Control vulnerability
Unauthenticated Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP BackItUp versions = 1.50...
WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Ultimate Membership Pro versions = 12.7...
Changing TCBServiSign 安全漏洞
Changing TCBServiSign is a cross-platform security control component from Changing, China. A security vulnerability exists in Changing TCBServiSign versions prior to 1.0.24.0318, which stems from a specific API that does not correctly validate the length of server-side inputs, and allows an...
WordPress Ultimate Classified Listings plugin < 1.3 - Unauthenticated LFI vulnerability
Unauthenticated LFI vulnerability discovered by Project Black in WordPress Plugin Ultimate Classified Listings versions 1.3...
WordPress Add Admin CSS plugin <= 2.0.1 - Unauthenticated Full Path Dislcosure vulnerability
Unauthenticated Full Path Dislcosure vulnerability discovered by stealthcopter in WordPress Plugin Add Admin CSS versions = 2.0.1...
WordPress Add Admin JavaScript plugin <= 2.0 - Unauthenticated Full Path Dislcosure vulnerability
Unauthenticated Full Path Dislcosure vulnerability discovered by stealthcopter in WordPress Plugin Add Admin JavaScript versions = 2.0...
WordPress Admin Trim Interface plugin <= 3.5.1 - Unauthenticated Full Path Disclosure vulnerability
Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Admin Trim Interface versions = 3.5.1...
WordPress Aramex Shipping WooCommerce plugin <= 1.1.21 - Unauthenticated Full Path Disclosure vulnerability
Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Aramex Shipping WooCommerce versions = 1.1.21...
WordPress WP Meteor Website Speed Optimization Addon plugin <= 3.4.3 - Unauthenticated Full Path Disclosure vulnerability
Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin WP Meteor Page Speed Optimization Topping versions = 3.4.3...
WordPress Social Auto Poster plugin <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by István Márton in WordPress Plugin Social Auto Poster versions = 5.3.14...
Unauthenticated Password Reset Vulnerability in Multiple SICAM Products
The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTUs are modular devices for remote control and automation applications in all areas of energy supply.The SICAM EGS is the gateway ...
WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme ListingPro versions = 2.9.4...
CVE-2024-31070
CVE-2024-31070 affects Century Systems’ FutureNet NXR/VXR/WXR series. The vulnerability is an insecure default initialization that allows a remote unauthenticated attacker to access the Telnet service without limits. Affected devices expose Telnet due to default configuration and insecure resourc...
WordPress AForms plugin <= 2.2.6 - Unauthenticated Full Path Disclosure vulnerability
Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin AForms versions = 2.2.6...
WordPress JSON API User plugin <= 3.9.3 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin JSON API User versions = 3.9.3...
