PT-2024-23013 · WordPress · Dracula Dark Mode

Name of the Vulnerable Software and Affected Versions: Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress versions 1.0.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS...

PT-2024-23271 · Wpdeveloper · Wpdeveloper Betterdocs

Name of the Vulnerable Software and Affected Versions: WPDeveloper BetterDocs versions 3.3.3 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security risks, as deserializing untrusted data can allow an attacker to execute...

PT-2024-20507 · Wedevs · Wedevs Woocommerce Conversion Tracking

Name of the Vulnerable Software and Affected Versions: weDevs WooCommerce Conversion Tracking versions n/a through 2.0.11 Description: The issue is related to a Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking. This vulnerability affects the specified versions of the...

PT-2024-22630 · WordPress · Wp-Lister Lite For Amazon

Name of the Vulnerable Software and Affected Versions: WP-Lister Lite for Amazon versions 2.6.11 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables potential...

PT-2024-11726 · Sharethis · Sharethis Dashboard For Google Analytics

Name of the Vulnerable Software and Affected Versions: ShareThis Dashboard for Google Analytics versions through 3.1.4 Description: The issue is related to a Missing Authorization vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide ...

PT-2024-22731 · Tablesome · Tablesome

Name of the Vulnerable Software and Affected Versions: Table & Contact Form 7 Database – Tablesome versions 1.0.0 through 1.0.27 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS, which c...

PT-2024-18826 · WordPress · Masterstudy Lms Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress versions up to, and including, 3.2.10 Description: The issue allows unauthenticated attackers to extract sensitive data, including all registered...

PT-2024-17572 · WordPress · Elementor Header & Footer Builder

Name of the Vulnerable Software and Affected Versions: Elementor Header & Footer Builder plugin for WordPress versions up to, and including, 1.6.24 Description: The issue is related to Stored Cross-Site Scripting via the flyout layout attribute due to insufficient input sanitization and output...

PT-2024-14182 · Hasthemes · Ht Mega – Absolute Addons For Elementor

Name of the Vulnerable Software and Affected Versions: HasThemes HT Mega – Absolute Addons For Elementor versions through 2.3.3 Description: A Cross-Site Request Forgery CSRF issue affects the specified software, allowing unauthorized actions to be performed on behalf of a user without their...

PT-2024-21193 · Miniorange · Miniorange Malware Scanner

Name of the Vulnerable Software and Affected Versions: miniorange Malware Scanner versions through 4.7.2 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for potential exploitation by injecting...

PT-2024-14912 · Openvpn · Openvpn 3 Core Library

Name of the Vulnerable Software and Affected Versions: OpenVPN 3 Core Library versions through 3.8.3 Description: The issue is related to the PKCS7 parser in the OpenVPN 3 Core Library, which did not properly validate the parsed data. This would result in the application crashing. Recommendations...

PT-2024-15687 · WordPress · Piraeus Bank Woocommerce Payment Gateway

Name of the Vulnerable Software and Affected Versions: Piraeus Bank WooCommerce Payment Gateway plugin for WordPress versions up to, and including, 1.6.5.1 Description: The issue is related to a time-based blind SQL Injection vulnerability via the MerchantReference parameter. This vulnerability i...

PT-2024-20509 · WordPress · Wp Auto Listings

Name of the Vulnerable Software and Affected Versions: Auto Listings – Car Listings & Car Dealership Plugin for WordPress versions n/a through 2.6.5 Description: The issue affects the WP Auto Listings plugin, allowing Stored XSS due to improper neutralization of input during web page generation...

PT-2024-15091 · WordPress · Generatepress Premium

Name of the Vulnerable Software and Affected Versions: GeneratePress Premium plugin for WordPress versions up to, and including, 2.3.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's custom meta output due to insufficient input sanitization and output escaping on...

PT-2024-1028 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.1.3 and earlier Description: The issue is related to an out-of-bounds read that could lead to the disclosure of sensitive memory. An attacker could leverage this to bypass mitigations such as ASLR...

PT-2024-11598 · Unknown · Profilegrid

Name of the Vulnerable Software and Affected Versions: ProfileGrid – User Profiles, Memberships, Groups and Communities versions through 5.0.3 Description: The issue is related to a Missing Authorization vulnerability. This means that certain actions or data may be accessible without the necessar...

PT-2024-14426 · Unknown · Teachpress

Name of the Vulnerable Software and Affected Versions: teachPress versions n/a through 9.0.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the us...

PT-2024-11742 · WordPress · Js Help Desk – Best Help Desk & Support Plugin

Name of the Vulnerable Software and Affected Versions: JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.7.1 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the JS Help Desk – Best Help Desk & Support Plugin...

PT-2023-31841 · Woo · Woopayments

Name of the Vulnerable Software and Affected Versions: WooPayments – Fully Integrated Solution Built and Supported by Woo versions n/a through 6.9.2 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects the WooPayments...

PT-2023-31707 · Unknown · Upsolution Impreza

Name of the Vulnerable Software and Affected Versions: UpSolution Impreza – WordPress Website and WooCommerce Builder versions n/a through 8.17.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows...