PT-2023-29669 · Unknown · Gilles Dumas

Name of the Vulnerable Software and Affected Versions: Gilles Dumas which template file plugin versions = 4.6.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...

PT-2023-29477 · Unknown · Matt Mckenny Stout Google Calendar Plugin

Name of the Vulnerable Software and Affected Versions: Matt McKenny Stout Google Calendar plugin versions = 1.2.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the use...

PT-2023-24570 · WordPress · Read More & Accordion

Name of the Vulnerable Software and Affected Versions: Read More & Accordion WordPress plugin versions prior to 3.2.7 Description: The issue allows high-privilege users, such as admins, to perform PHP Object Injection when a suitable gadget is present, due to the unserialize of user input provide...

PT-2023-25773 · WordPress · Activitypub

Name of the Vulnerable Software and Affected Versions: ActivityPub WordPress plugin versions prior to 1.0.0 Description: The issue allows any authenticated user to retrieve the title of arbitrary posts, including drafts and private ones, via an IDOR vector. This occurs because the plugin does not...

PT-2023-30664 · WordPress · Dologin Security

Name of the Vulnerable Software and Affected Versions: DoLogin Security WordPress plugin versions prior to 3.7.1 Description: The issue concerns the DoLogin Security WordPress plugin, which does not restrict access to a widget showing IPs of failed logins to low-privileged users. This could...

PT-2023-29586 · Unknown · Christopher Finke Feed Statistics

Name of the Vulnerable Software and Affected Versions: Christopher Finke Feed Statistics plugin versions = 4.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

PT-2023-31785 · WordPress · User Activity Log Pro

Name of the Vulnerable Software and Affected Versions: user-activity-log-pro WordPress plugin versions prior to 2.3.4 Description: The issue allows an attacker to manipulate the client IP address value by exploiting the plugin's retrieval of IP addresses from potentially untrusted headers. This c...

PT-2023-16843 · WordPress · Hotjar Plugin

Name of the Vulnerable Software and Affected Versions: Hotjar plugin for WordPress versions up to, and including, 1.0.15 Description: The issue arises from insufficient input sanitization and output escaping, allowing authenticated attackers with administrator-level permissions to inject arbitrar...

PT-2023-25099 · Ibm · Ibm Cloud Pak For Business Automation

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Business Automation versions 18.0.0 through 22.0.2 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...

PT-2023-32186 · Vrite · Vrite

Name of the Vulnerable Software and Affected Versions: vrite versions prior to 0.3.0 Description: The issue is related to the allocation of resources without limits or throttling in the GitHub repository vriteio/vrite. This could potentially lead to exploitation. Recommendations: For versions pri...

PT-2023-29473 · Irivyou · Irivyou

Name of the Vulnerable Software and Affected Versions: IRivYou plugin versions = 2.2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to. No...

PT-2023-32185 · Vriteio · Vrite

Name of the Vulnerable Software and Affected Versions: vriteio/vrite versions prior to 0.3.0 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository vriteio/vrite. SSRF is a type of attack where an attacker can trick a server into making requests to internal...

PT-2023-29341 · WordPress · Category Meta

Name of the Vulnerable Software and Affected Versions: Category Meta plugin versions 1.2.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-32172 · Line · Line Client For Ios

Name of the Vulnerable Software and Affected Versions: LINE Client for iOS versions prior to 13.16.0 Description: The issue is related to a lack of TLS certificate verification in log transmission of a financial module. This could potentially lead to security risks, but specific details about the...

PT-2023-29380 · Unknown · Fla-Shop.Com Interactive World Map

Name of the Vulnerable Software and Affected Versions: Fla-shop.Com Interactive World Map plugin versions = 3.2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

PT-2023-23924 · Unknown · Softether Vpn

Name of the Vulnerable Software and Affected Versions: SoftEther VPN versions 4.41-9782-beta through 5.01.9674 Description: An authentication bypass issue exists in the CiRpcServerThread functionality. This allows an attacker to perform a local man-in-the-middle attack to trigger the issue...

PT-2023-28281 · Unknown +1 · Kv Replay Viewer +2

Name of the Vulnerable Software and Affected Versions: KV STUDIO versions 11.62 and earlier KV REPLAY VIEWER versions 2.62 and earlier Description: An out-of-bounds read issue exists, potentially allowing information disclosure or arbitrary code execution if a user of KV STUDIO PLAYER opens a...

PT-2023-32151 · Tiann · Kernelsu

Name of the Vulnerable Software and Affected Versions: tiann/kernelsu versions prior to 0.6.9 Description: The issue concerns incorrect authorization in the tiann/kernelsu GitHub repository. This allows for root takeover via signature spoofing. Recommendations: For versions prior to 0.6.9, update...

PT-2023-29255 · Andres Felipe Perea V · Copyrightpro

Name of the Vulnerable Software and Affected Versions: Andres Felipe Perea V. CopyRightPro plugin versions = 2.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

PT-2023-5997 · Fortinet · Fortimanager +1

Name of the Vulnerable Software and Affected Versions: FortiManager & FortiAnalyzer version 7.4.0 FortiManager & FortiAnalyzer versions 7.2.0 through 7.2.3 FortiManager & FortiAnalyzer versions 7.0.0 through 7.0.8 FortiManager & FortiAnalyzer versions 6.4.0 through 6.4.12 FortiManager &...