CVE-2023-46638

Cross-Site Request Forgery CSRF vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...

WordPress canvasio3D Light plugin <= 2.5.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin canvasio3D Light versions = 2.5.0...

PT-2024-3924

Name of the Vulnerable Software and Affected Versions: libexpat versions through 2.5.0 Description: The issue is related to the incorrect limitation of recursive references to objects in DTD, which can lead to a denial of service. This is caused by recursive XML Entity Expansion if XML DTD is...

PT-2023-20089 · Webcodin · Webcodin Wcp Openweather Plugin

Name of the Vulnerable Software and Affected Versions: Webcodin WCP OpenWeather plugin versions = 2.5.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

PT-2023-19341 · WordPress · Automatorwp

Name of the Vulnerable Software and Affected Versions: AutomatorWP plugin versions = 2.5.0 Description: A Cross-Site Request Forgery CSRF issue allows for object deletion. Recommendations: For AutomatorWP plugin versions = 2.5.0, update to a version greater than 2.5.0 to resolve the issue...