PT-2024-23291

Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions 4.0.27 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecti...

PT-2024-4253 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-9289 Synology Surveillance Station versions prior to 9.2.0-11289 Description: The issue is related to a missing authorization vulnerability in the System webapi component of Synology...

PT-2024-23136 · Motopress · Motopress Stratum

Name of the Vulnerable Software and Affected Versions: MotoPress Stratum versions 1.3.15 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

PT-2024-23227 · Elementor · Exclusive Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Exclusive Addons Elementor versions through 2.6.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

PT-2024-2579 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS and Cisco IOS XE affected versions not specified Description: The issue is related to the incorrect handling of LISP packets, which could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in ...

PT-2024-22835 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-11289 Synology Surveillance Station versions prior to 9.2.0-9289 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used...

PT-2024-19224 · Unknown · Seraphinite Accelerator

Name of the Vulnerable Software and Affected Versions: Seraphinite Accelerator versions through 2.20.47 Description: The issue is related to the insertion of sensitive information into log files. Recommendations: For versions through 2.20.47, update to a version that contains a fix for this issue...

PT-2024-23063 · Unknown · Affiliate-Toolkit

Name of the Vulnerable Software and Affected Versions: affiliate-toolkit versions through 3.4.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions...

PT-2024-23283 · Supsystic · Supsystic Slider

Name of the Vulnerable Software and Affected Versions: Supsystic Slider by Supsystic versions 1.8.10 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

PT-2024-13516 · Unknown · Terry Lin Wp Githuber Md

Name of the Vulnerable Software and Affected Versions: Terry Lin WP Githuber MD versions 1.16.2 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which can be exploited. No information is provided about the estimated number of potentially affecte...

PT-2024-23281 · Themeisle · Multiple Page Generator Plugin

Name of the Vulnerable Software and Affected Versions: Multiple Page Generator Plugin – MPG versions 3.4.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Themeisle Multiple Page Generator Plugin – MPG. This vulnerability allows unauthorized access du...

PT-2024-13528

Name of the Vulnerable Software and Affected Versions: WP Child Theme Generator versions 1.0.9 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the WP Child Theme Generator. This allows for the upload of files with potentially...

PT-2024-19334 · Nsquared · N Squared Simply Schedule Appointments

Name of the Vulnerable Software and Affected Versions: N Squared Simply Schedule Appointments versions 1.6.6.20 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

PT-2024-23245

Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions 4.0.26 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2024-11703 · Muffingroup · Muffingroup Betheme

Name of the Vulnerable Software and Affected Versions: Muffingroup Betheme versions through 26.6.1 Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects Muffingroup Betheme, allowing unauthorized access. Recommendations: For versions through 26.6.1...

PT-2024-11608 · Themehunk · Themehunk Advance Wordpress Search Plugin

Name of the Vulnerable Software and Affected Versions: ThemeHunk Advance WordPress Search Plugin versions 1.2.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the ThemeHunk Advance WordPress Search Plugin. Recommendations: For ThemeHunk Advance WordPress...

PT-2024-11702 · Muffingroup · Muffingroup Betheme

Name of the Vulnerable Software and Affected Versions: Muffingroup Betheme versions through 26.6.1 Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects Muffingroup Betheme, allowing unauthorized access. Recommendations: For versions through 26.6.1...

PT-2024-11976

Name of the Vulnerable Software and Affected Versions MainWP Wordfence Extension versions through 4.0.7 Description The issue is related to a Missing Authorization vulnerability in the MainWP Wordfence Extension. Recommendations For versions through 4.0.7, update to a version later than 4.0.7 to...

PT-2024-20059 · Clickup · Clickup Desktop

Name of the Vulnerable Software and Affected Versions: ClickUp Desktop versions prior to 3.3.77 Description: The issue allows code injection due to specific Electron Fuses, with inadequate protection against code injection through settings such as RunAsNode. This affects both macOS and Windows...

PT-2024-22191 · Typps · Typps Calendarista Basic Edition

Name of the Vulnerable Software and Affected Versions: Typps Calendarista Basic Edition versions 3.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for potential malicious script...