PT-2024-13243 · Proquality · Pqprintshippinglabels

Name of the Vulnerable Software and Affected Versions: ProQuality pqprintshippinglabels versions prior to 4.15.0 Description: The issue is related to Directory Traversal via the pqprintshippinglabels module. Recommendations: For versions prior to 4.15.0, update to version 4.15.0 or later to resol...

PT-2024-25388 · Unknown · Creative Motion Auto Featured Image

Name of the Vulnerable Software and Affected Versions: Creative Motion Auto Featured Image Auto Post Thumbnail versions n/a through 4.0.0 Description: The issue is a Server-Side Request Forgery SSRF vulnerability in Creative Motion Auto Featured Image Auto Post Thumbnail. This allows an attacker ...

PT-2024-25364 · Unknown · Master Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Master Addons for Elementor versions 2.0.5.4.1 and earlier Description: A Missing Authorization vulnerability has been identified in Jewel Theme Master Addons for Elementor. This issue allows unauthorized access, potentially leading to data...

PT-2024-27209 · WordPress · Gutenverse

Name of the Vulnerable Software and Affected Versions: Gutenverse WordPress plugin versions prior to 1.9.1 Description: The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation of the htmlTag option in various blocks...

PT-2024-25322 · 8Theme · 8Theme Xstore Core

Name of the Vulnerable Software and Affected Versions: 8theme XStore Core versions through 5.3.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For versions throu...

PT-2024-25446 · Jegstudio · Jegstudio Financio

Name of the Vulnerable Software and Affected Versions: Jegstudio Financio versions 1.1.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Jegstudio Financio. This issue allows an attacker to perform unintended actions on a user's account. The estimated number of potentiall...

PT-2024-25449 · Unknown · Meks Smart Social Widget

Name of the Vulnerable Software and Affected Versions: Meks Smart Social Widget versions 1.6.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

PT-2024-4020 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.x Description: The issue is related to an unrestricted file upload vulnerability in the web component of Ivanti Avalanche. This vulnerability allows an authenticated, privileged user to execute arbitrary...

PT-2024-3321

Name of the Vulnerable Software and Affected Versions glibc versions 2.15 and later Description The Name Service Cache Daemon's nscd cache fails to add a not-found netgroup response to the cache, resulting in a null pointer dereference when a client request is made. This flaw was introduced in...

PT-2024-3184 · Freerdp +9 · Freerdp +9

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 3.5.1 Description: The issue is related to an out-of-bounds read in the FreeRDP client, specifically in the freerdp image copy function. This can be exploited by a remote attacker to impact the confidentiality,...

PT-2024-16372 · WordPress · The Shoplentor – Woocommerce Builder For Elementor & Gutenberg +10 Modules – All In One Solution

Name of the Vulnerable Software and Affected Versions: The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution plugin for WordPress versions up to, and including, 2.8.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's...

PT-2024-12610 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 5.0.0 through 5.0.7 Description: The issue allows a local user to obtain sensitive information due to improper encryption of certain data. Recommendations: For IBM Aspera Faspex versions 5.0.0 through 5.0.7, update ...

PT-2024-26567 · WordPress · Learnpress

Name of the Vulnerable Software and Affected Versions: LearnPress – WordPress LMS Plugin versions up to, and including, 4.2.6.4 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes. This allows...

PT-2024-24696 · Kraftplugins · Kraftplugins Mega Elements

Name of the Vulnerable Software and Affected Versions: Kraftplugins Mega Elements versions 1.1.9 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means an attacker can inject malicious scripts into the...

PT-2024-24420 · Unknown · Navigation Menu As Dropdown Widget

Name of the Vulnerable Software and Affected Versions: Navigation menu as Dropdown Widget versions 1.3.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

PT-2024-12044 · Unknown · Data-Tables-Generator-By-Supsystic

Name of the Vulnerable Software and Affected Versions: Supsystic Data Tables Generator versions 1.10.25 and earlier Description: The issue is related to an Incorrect Authorization vulnerability in Supsystic Data Tables Generator. Recommendations: For versions 1.10.25 and earlier, update to a...

PT-2024-24671 · Unknown · Bmi Adult & Kid Calculator

Name of the Vulnerable Software and Affected Versions: BMI Adult & Kid Calculator versions 1.2.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the BMI Adult & Kid Calculator. Recommendations: For versions 1.2.1 and earlier, update ...

PT-2024-3737 · Oracle · Oracle Hospitality Simphony

Name of the Vulnerable Software and Affected Versions: Oracle Hospitality Simphony versions 19.1.0 through 19.5.4 Description: The issue exists due to insufficient input validation in the Simphony POS component. Exploitation of this issue may allow a remote attacker to modify, add, or delete data...

PT-2024-24586 · Very Good Plugins · Fatal Error Notify

Name of the Vulnerable Software and Affected Versions: Very Good Plugins Fatal Error Notify versions 1.5.2 and earlier Description: The issue is related to a Missing Authorization vulnerability. This means that there is a lack of proper authorization checks, potentially allowing unauthorized acce...

PT-2024-24365 · Kohya Ss · Kohya Ss

Name of the Vulnerable Software and Affected Versions: Kohya ss versions 22.6.1 through 23.1.4 Description: Kohya ss is a GUI for Kohya's Stable Diffusion trainers. The issue is related to command injection in the finetune gui.py file. This vulnerability is fixed in version 23.1.5. Recommendation...