PT-2024-36817 · WordPress · Tournamatch

Name of the Vulnerable Software and Affected Versions: Tournamatch WordPress plugin versions prior to 4.6.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, fo...

PT-2024-32638 · WordPress · Eventon

Name of the Vulnerable Software and Affected Versions: EventON WordPress plugin versions prior to 2.2.15 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised and escape...

PT-2024-29203 · WordPress · Pricing Table

Name of the Vulnerable Software and Affected Versions: Pricing Table plugin for WordPress versions up to, and including, 2.0.1 Description: The issue arises from a missing capability check on the ajax function, allowing authenticated attackers with subscriber-level access and above to perform...

PT-2024-28930 · Openai · Openai Chatgpt

Name of the Vulnerable Software and Affected Versions: OpenAI ChatGPT app versions prior to 2024-07-05 for macOS Description: The issue concerns the OpenAI ChatGPT app for macOS, which opts out of the sandbox and stores conversations in cleartext in a location accessible to other apps. This could...

PT-2024-26965 · Livemesh · Elementor Addons

Name of the Vulnerable Software and Affected Versions: Elementor Addons by Livemesh plugin for WordPress versions up to, and including, 8.3.7 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Posts Grid widget due to insufficient input sanitization and output...

PT-2024-28450 · Aimeos · Ai-Controller-Frontend

Name of the Vulnerable Software and Affected Versions: aimeos/ai-controller-frontend versions prior to 2024.04.2 aimeos/ai-controller-frontend versions prior to 2023.10.9 aimeos/ai-controller-frontend versions prior to 2022.10.8 aimeos/ai-controller-frontend versions prior to 2021.10.8...

PT-2024-18807 · Samsung · Secure Folder

Name of the Vulnerable Software and Affected Versions: Secure Folder versions prior to SMR Jul-2024 Release 1 Description: The issue arises from improper handling of exceptional conditions, allowing physical attackers to bypass authentication under certain conditions. User interaction is required...

PT-2024-34836 · WordPress · Video Widget

Name of the Vulnerable Software and Affected Versions: Video Widget WordPress plugin versions 1.2.3 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised and...

PT-2024-28287

Name of the Vulnerable Software and Affected Versions Libde265 version 1.0.15 Description A Heap Buffer Overflow issue allows attackers to crash the application by sending a crafted payload to the display444as420 function at sdl.cc. Recommendations For Libde265 version 1.0.15, consider updating t...

PT-2024-28455

Name of the Vulnerable Software and Affected Versions: Click Studios Passwordstate Core versions prior to 9.8 build 9858 Description: The issue allows for authentication bypass. Recommendations: For versions prior to 9.8 build 9858, update to version 9.8 build 9858 or later to resolve the issue...

PT-2024-10621 · Lighttpd · Lighttpd

Name of the Vulnerable Software and Affected Versions: lighttpd versions = 1.4.50 Description: The issue is related to a use-after-free vulnerability that can allow access to compare data in a case-insensitive manner with a reused pointer. This vulnerability might read from invalid pointers to...

PT-2024-14163 · Expresstech · Expresstech Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: ExpressTech Quiz And Survey Master versions 8.1.16 and earlier Description: The issue is related to a Missing Authorization vulnerability in ExpressTech Quiz And Survey Master. Recommendations: For ExpressTech Quiz And Survey Master versions...

PT-2024-28647 · WordPress · Similarity

Name of the Vulnerable Software and Affected Versions: Similarity WordPress plugin versions prior to 3.1 Description: The issue is related to the lack of a CSRF check when resetting settings in the plugin, which could allow attackers to make a logged-in admin reset them via a CSRF attack...

PT-2024-26: Improper Authorization leads to web administration interface access in UniPORT E-slip

The vulnerability was identified in UniPORT E-slip 1.4.0.0 and lower. The discovered vulnerability is caused by insufficient input data validation. It can be exploited by an attacker to gain access to the application administration web-interface. The vulnerability is unexploitable in versions...

PT-2024-6619

Name of the Vulnerable Software and Affected Versions: VLC media player versions 3.0.20 and earlier Description: The issue is related to an integer overflow in VLC media player, which could be triggered by a maliciously crafted mms stream, potentially leading to a denial of service or arbitrary...

PT-2024-27519 · Securenvoy · Securenvoy Mfa

Name of the Vulnerable Software and Affected Versions: SecurEnvoy MFA versions prior to 9.4.514 Description: Multiple LDAP injections vulnerabilities exist due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through bli...

PT-2024-11987 · Mainwp · Mainwp Staging Extension

Name of the Vulnerable Software and Affected Versions: MainWP MainWP Staging Extension versions 4.0.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in the MainWP MainWP Staging Extension. Recommendations: For MainWP MainWP Staging Extension versions 4.0.3...

PT-2024-23474 · Upqode · Upqode Whizzy

Name of the Vulnerable Software and Affected Versions: UPQODE Whizzy versions 1.1.18 and earlier Description: A Missing Authorization issue affects the software, potentially allowing unauthorized access. The estimated number of affected devices is not specified. There is no information about...

PT-2024-26685 · Woocommerce · Rldd Auto Coupons For Woocommerce

Name of the Vulnerable Software and Affected Versions: RLDD Auto Coupons for WooCommerce versions 3.0.14 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

PT-2024-26653 · Unknown · Wpblockart Blockart Blocks

Name of the Vulnerable Software and Affected Versions: WPBlockArt BlockArt Blocks versions 2.1.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendation...