CVE-2024-54418 WordPress DTC Documents plugin <= 1.1.05 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Diversified Technology Corp., WPYog, and Gagan Deep Singh DTC Documents allows Cross Site Request Forgery.This issue affects DTC Documents: from n/a through 1.1.05...

CVE-2024-54407 WordPress CK and SyntaxHighlighter plugin <= 3.4.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in a328496647 CK and SyntaxHighlighter ck-and-syntaxhighlighter allows Stored XSS.This issue affects CK and SyntaxHighlighter: from n/a through = 3.4.2...

CVE-2024-54421 WordPress Floating Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sanjay Singh Negi Floating Video Player allows Stored XSS.This issue affects Floating Video Player: from n/a through 1.0...

CVE-2024-54439 WordPress Amazon Product Price plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Alok Tiwari Amazon Product Price amazon-product-price allows Stored XSS.This issue affects Amazon Product Price: from n/a through = 1.1...

PT-2024-36668 · Tidy Up · Tidy Up

Name of the Vulnerable Software and Affected Versions: Tidy Up versions n/a through 1.3 Description: A Cross-Site Request Forgery CSRF issue allows Reflected XSS. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to. The...

PT-2024-36294 · Unknown +1 · Syntaxhighlighter +1

Name of the Vulnerable Software and Affected Versions: CK and SyntaxHighlighter versions n/a through 3.4.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a w...

IObit Advanced SystemCare Utimate 安全漏洞

IObit Advanced SystemCare Utimate is a powerful antivirus and system optimization tool from IObit. A security vulnerability exists in IObit Advanced SystemCare Utimate version 17.0.0 and earlier, which stems from a function 0x8001E040 in the AscRegistryFilter.sys library of the component IOCTL...

PT-2024-17699 · Iobit · Iobit Advanced Systemcare Ultimate +1

Name of the Vulnerable Software and Affected Versions: IObit Advanced SystemCare Ultimate versions up to 17.0.0 Description: A problematic issue has been found, affecting the function 0x8001E004 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null...

WordPress plugin Tidy Up 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2024-36244 · Unknown · 3D Avatar User Profile

Name of the Vulnerable Software and Affected Versions: 3D Avatar User Profile versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected cross-site scripting XSS. This means that an attacker can inject...

PT-2024-36301 · Unknown · Display Future Posts

Name of the Vulnerable Software and Affected Versions: Display Future Posts versions n/a through 0.2.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

PT-2024-17697 · Iobit · Iobit Advanced Systemcare Ultimate +1

Name of the Vulnerable Software and Affected Versions: IObit Advanced SystemCare Ultimate versions up to 17.0.0 Description: A problematic issue has been found, affecting the function 0x8001E000 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null...

PT-2024-36295 · Unknown · Youtube Video Grid

Name of the Vulnerable Software and Affected Versions: Jake H. Youtube Video Grid versions n/a through 1.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can be exploited due to incorrectly configured access control security levels. This allows for the...

WordPress Easy Site Importer plugin <= 1.0.1 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Easy Site Importer versions = 1.0.1...

WordPress WooCommerce Basic Ordernumbers plugin <= 1.4.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WooCommerce Basic Ordernumbers versions = 1.4.4...

WordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Share Buttons – Social Media versions = 1.0.2...

WordPress LaunchPage.app Importer plugin <= 1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin LaunchPage.app Importer versions = 1.1...

WordPress Utech World Time Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Utech World Time versions = 1.0...

WordPress plugin WP Ad Guru 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

PT-2024-17590 · WordPress · Import Eventbrite Events

Name of the Vulnerable Software and Affected Versions: Import Eventbrite Events plugin for WordPress versions up to, and including, 1.7.4 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input sanitization and output escaping. This...