PT-2023-15208 · WordPress · Coschedule

Name of the Vulnerable Software and Affected Versions: CoSchedule plugin versions prior to 3.3.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-15090 · WordPress · Marty Thornley Bulk Resize Media

Name of the Vulnerable Software and Affected Versions: Marty Thornley Bulk Resize Media plugin versions = 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

PT-2023-15207 · WordPress · Magepeople Team Event Manager/Tickets Selling Plugin For Woocommerce

Name of the Vulnerable Software and Affected Versions: MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce plugin versions = 3.7.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a us...

PT-2023-15195 · WordPress · Pretty Links

Name of the Vulnerable Software and Affected Versions: Pretty Links plugin versions prior to 3.4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-22812 · Iris-Web · Iris-Web

Name of the Vulnerable Software and Affected Versions: iris-web versions prior to 2.2.1 Description: A stored Cross-Site Scripting XSS issue has been identified, allowing an attacker to inject malicious scripts into the application. These scripts are executed when a user visits the affected...

PT-2023-17441 · Ipekyolu · Ipekyolu Software Auto Damage Tracking

Name of the Vulnerable Software and Affected Versions: Ipekyolu Software Auto Damage Tracking Software versions prior to 4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2023-2852 · Zyxel · Zyxel Usg Flex Series +5

Name of the Vulnerable Software and Affected Versions: Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1 Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 1 Zyxel USG FLEX 50W firmware versions 4.25 through 5.36 Patch 1 Zyxel USG20W-VPN firmware versions 4.25 through 5.36...

PT-2023-24615 · Briar · Briar

Name of the Vulnerable Software and Affected Versions: Briar versions prior to 1.4.22 Description: The issue allows attackers to spoof other users' messages in a blog, forum, or private group. However, each spoofed message would need to be an exact duplicate of a legitimate message displayed...

PT-2023-19153 · WordPress · Manoj Thulasidas Theme Tweaker

Name of the Vulnerable Software and Affected Versions: Manoj Thulasidas Theme Tweaker plugin versions = 5.20 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

PT-2023-20426 · Unknown · Tim Eckel Minify Html Plugin

Name of the Vulnerable Software and Affected Versions: Tim Eckel Minify HTML plugin versions = 2.1.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-19163 · Winwar Media · Wp Email Capture

Name of the Vulnerable Software and Affected Versions: Winwar Media WP Email Capture plugin versions = 3.9.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

PT-2023-20423 · Unknown · Tim Eckel Read More Excerpt Link

Name of the Vulnerable Software and Affected Versions: Tim Eckel Read More Excerpt Link plugin versions = 1.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

PT-2023-20100 · Podlove · Podlove Subscribe Button Plugin

Name of the Vulnerable Software and Affected Versions: Podlove Podlove Subscribe button plugin versions 1.3.7 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-14544 · WordPress · Thingsforrestaurants Quick Restaurant Reservations

Name of the Vulnerable Software and Affected Versions: ThingsForRestaurants Quick Restaurant Reservations plugin versions 1.5.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into...

PT-2023-15225 · WordPress · Stylistwp Extra Block Design

Name of the Vulnerable Software and Affected Versions: StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks plugin versions 0.2.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended...

PT-2023-3599

Name of the Vulnerable Software and Affected Versions Requests versions 2.3.0 through 2.30.0 Description The issue is related to the leaking of Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This occurs due to how the rebuild proxies function is used to...

PT-2023-23339 · Mitel · Mitel Mivoice Connect

Name of the Vulnerable Software and Affected Versions: Mitel MiVoice Connect versions 19.3 SP2 22.24.1500.0 and earlier Description: A vulnerability in the Headquarters server component could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improp...

PT-2023-19284 · WordPress · Lj Apps Wp Airbnb Review Slider

Name of the Vulnerable Software and Affected Versions: LJ Apps WP Airbnb Review Slider plugin versions = 3.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

PT-2023-15179 · WordPress · Bill Erickson Gallery Metabox

Name of the Vulnerable Software and Affected Versions: Bill Erickson Gallery Metabox plugin versions = 1.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

PT-2023-21073 · WordPress · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg plugin for WordPress versions up to, and including, 2.7.9.8 Description: The issue is related to Stored Cross-Site Scripting via the 'gh form' shortcode due to insufficient input sanitization and output escaping on user-supplied...