PT-2023-31684 · Stylemixthemes · Stylemixthemes Booking Calendar

Name of the Vulnerable Software and Affected Versions: StylemixThemes Booking Calendar | Appointment Booking | BookIt versions n/a through 2.4.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allo...

PT-2023-28340 · Growi · Growi

Name of the Vulnerable Software and Affected Versions: GROWI versions prior to v3.4.0 Description: A stored cross-site scripting issue exists in the presentation feature. If exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product...

PT-2023-31657 · Unknown · Freshlight Lab Menu Image

Name of the Vulnerable Software and Affected Versions: Freshlight Lab Menu Image, Icons made easy versions n/a through 3.10 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS, which means...

PT-2023-15420 · Unknown · Popup Maker

Name of the Vulnerable Software and Affected Versions: Popup Maker – Popup for opt-ins, lead gen, & more versions 1.17.1 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This can potentially lead to unauthorized access to confidentia...

PT-2023-31377 · WordPress · Soledad

Name of the Vulnerable Software and Affected Versions: Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme versions n/a through 8.4.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. Th...

PT-2023-21756 · Tribulant · Tribulant Slideshow Gallery

Name of the Vulnerable Software and Affected Versions: Tribulant Slideshow Gallery LITE versions 1.7.6 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation ...

PT-2023-30379 · Avirtum · Avirtum Ipages Flipbook For Wordpress

Name of the Vulnerable Software and Affected Versions: Avirtum iPages Flipbook For WordPress versions 1.4.8 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential...

PT-2023-24299 · Unknown · Automatewoo

Name of the Vulnerable Software and Affected Versions: AutomateWoo versions through 4.9.50 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for potential exploitation by injecting malicious SQL...

PT-2023-24289 · Woocommerce · Automatewoo

Name of the Vulnerable Software and Affected Versions: AutomateWoo versions 4.9.40 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo. This allows for the upload of files with potentially dangerous types,...

PT-2023-29328

Name of the Vulnerable Software and Affected Versions Perfect Images Manage Image Sizes, Thumbnails, Replace, Retina versions through 6.4.5 Description The issue is related to Exposure of Sensitive Information to an Unauthorized Actor. This allows unauthorized access to sensitive information...

PT-2023-24300 · Unknown · Woocommerce Product Vendors

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Vendors versions 2.1.76 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-32624 · Gallagher · Gallagher Controller 7000

Name of the Vulnerable Software and Affected Versions: Gallagher Controller 7000 versions 8.70 prior to vCR8.70.231204a Gallagher Controller 7000 versions 8.80 prior to vCR8.80.231204a Gallagher Controller 7000 versions 8.90 prior to vCR8.90.231204a Gallagher Controller 7000 versions 9.00 prior t...

PT-2023-32567 · WordPress · The Events Calendar

Name of the Vulnerable Software and Affected Versions: The Events Calendar WordPress plugin versions prior to 6.2.8.1 Description: The issue allows unauthenticated users to access the content of password-protected posts via a crafted request. Recommendations: For versions prior to 6.2.8.1, update...

PT-2023-13784 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions through 2.25.1 Description: A Server-Side Request Forgery SSRF issue affects the GiveWP – Donation Plugin and Fundraising Platform. This allows an attacker to trick the server into...

Important: kernel-livepatch-6.1.61-85.141

Issue Overview: A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The function nfttransgccatchall did not remove the catchall set element from the catchalllist when the argument sync is true, making it possib...

Fedora: Security Advisory for perl-Devel-Cover (FEDORA-2023-9ef8a60a05)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-31385 · Woocommerce · Fox – Currency Switcher Professional For Woocommerce

Name of the Vulnerable Software and Affected Versions: FOX – Currency Switcher Professional for WooCommerce versions 1.4.1.4 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, which can be exploited by an attacker to perform unintended actions on a user's...

PT-2023-31344 · Unknown · Denis Kobozev Csv Importer

Name of the Vulnerable Software and Affected Versions: Denis Kobozev CSV Importer versions 0.3.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-8061 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a Cross-site Scripting DOM-based XSS vulnerability. It can be exploited if a low-privileged attacker convinces a victim to visit a URL referencing a...

PT-2023-27826 · Softing · Softing Opc Ua C++ Sdk

Name of the Vulnerable Software and Affected Versions: Softing OPC UA C++ SDK versions prior to 6.30 Description: An uncaught exception issue may cause the application to crash when the server wants to send an error packet, while the socket is blocked on writing. Recommendations: For versions pri...