WordPress Zotpress plugin <= 7.3.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Zotpress versions = 7.3.9...

WordPress Counter Up plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Counter Up versions = 2.2.1...

WordPress Gold Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Gold Addons for Elementor versions = 1.2.9...

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.5.4...

WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Dynamics 365 Integration versions = 1.3.17...

WordPress Shared Files plugin <= 1.7.19 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by domiee13 Patchstack Alliance in WordPress Plugin Shared Files versions = 1.7.19...

WordPress Counter Up Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Counter Up Type Plugin Vulnerable versions = 2.2.1 Fixed in 2.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34564 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0c39c66bb9f2 Credits LVT-tholv2k Required privilege Contributor...

WordPress Startklar Elementor Addons plugin <= 1.7.13 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by István Márton in WordPress Plugin Startklar Elementor Addons versions = 1.7.13...

WordPress AWSOM News Announcement plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rayhan Ramdhany Hanaputra Patchstack Alliance in WordPress Plugin AWSOM News Announcement versions = 1.6.0...

WordPress Brozzme Scroll Top plugin <= 1.8.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Cronus Patchstack Alliance in WordPress Plugin Brozzme Scroll Top versions = 1.8.5...

WordPress canvasio3D Light plugin <= 2.5.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin canvasio3D Light versions = 2.5.0...

CVE-2024-33912

Missing Authorization vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 1.9.16...

WordPress WP Post Author plugin <= 3.7.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Kyle Sanchez Patchstack Alliance in WordPress Plugin WP Post Author versions = 3.7.4...

WordPress hostel plugin <= 1.1.5.3 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Benedictus Jovan aillesiM in WordPress Plugin Hostel versions = 1.1.5.3...

PT-2024-25837 · Unknown · Leadconnector

Name of the Vulnerable Software and Affected Versions: LeadConnector versions n/a through 1.7 Description: The issue is related to a Missing Authorization vulnerability in LeadConnector. Recommendations: For LeadConnector versions n/a through 1.7, update to a version that includes the fix for the...

PT-2024-25835 · Unknown · Theme Freesia Edge

Name of the Vulnerable Software and Affected Versions: Theme Freesia Edge versions n/a through 2.0.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...

ASUS RT-AC51U 安全漏洞

ASUS RT-AC51U is a wireless router from Asus China. A security vulnerability exists in ASUS RT-AC51U version 3.0.0.4.380.8591 and prior versions. An attacker can exploit the vulnerability to run arbitrary code via the WPA pre-shared key field...

PT-2024-31431 · Ruijie · Ruijie Rg-Uac

Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC up to 20240428 Description: A critical issue affects some unknown functionality of the file /view/networkConfig/ArpTable/arp add commit.php. The manipulation of the text ip addr and text mac addr arguments leads to os command...

SUSE CVE-2024-27069

In the Linux kernel, the following vulnerability has been resolved: ovl: relax WARNON in ovlverifyarea syzbot hit an assertion in copy up data loop which looks like it is the result of a lower file whose size is being changed underneath overlayfs. This type of use case is documented to cause...

CVE-2022-48674

In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms During stress testing with CONFIGSMP disabled, KASAN reports as below: ================================================================== BUG: KASAN: use-after-free in...