PT-2024-23396 · Wpdeveloper · Essential Blocks For Gutenberg

Name of the Vulnerable Software and Affected Versions: Essential Blocks for Gutenberg versions 4.4.9 and earlier Description: The issue is a Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg. This allows for unauthorized access. Recommendations: For Essential Block...

PT-2024-23895 · Unknown · Dfactory Responsive Lightbox

Name of the Vulnerable Software and Affected Versions: dFactory Responsive Lightbox versions through 2.4.6 Description: A Missing Authorization vulnerability has been identified in dFactory Responsive Lightbox. This issue may expose websites to unauthorized access. The estimated number of...

PT-2024-20512 · Unknown · Awesome Support

Name of the Vulnerable Software and Affected Versions: Awesome Support versions n/a through 6.1.6 Description: A Missing Authorization issue affects the Awesome Support software. This issue allows unauthorized access, potentially leading to data breaches or other security incidents. The estimated...

PT-2024-23466 · Wpclever · Wpc Badge Management For Woocommerce

Name of the Vulnerable Software and Affected Versions: WPC Badge Management for WooCommerce versions 2.4.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in WPClever WPC Badge Management for WooCommerce. This vulnerability allows unauthorized access due to...

PT-2024-25312 · Wzone · Wzone

Name of the Vulnerable Software and Affected Versions: WZone versions 14.0.10 and earlier Description: A Missing Authorization issue has been identified. This issue allows for unauthorized access. The estimated number of potentially affected devices is not specified. Recommendations: For versions...

PT-2024-14494 · Pluggabl Llc · Booster Plus For Woocommerce

Name of the Vulnerable Software and Affected Versions: Booster Plus for WooCommerce versions prior to 7.1.3 Description: The issue is related to a Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce. Recommendations: For versions prior to 7.1.3, update to version 7.1....

PT-2024-21222 · Multivendorx · Product Catalog Enquiry For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Catalog Enquiry for WooCommerce by MultiVendorX versions 5.0.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Product Catalog Enquiry for WooCommerce by MultiVendorX. Recommendations: For...

PT-2024-26626 · Givewp · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP versions 3.12.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions 3.12.0 a...

PT-2024-26682 · Woocommerce · Active Products Tables For Woocommerce

Name of the Vulnerable Software and Affected Versions: Active Products Tables for WooCommerce versions 1.0.6.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. There...

PT-2024-26654 · Unknown · Wp Font Awesome

Name of the Vulnerable Software and Affected Versions: Block for Font Awesome versions 1.4.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS. Recommendations: For...

PT-2024-26645 · Thimpress · Thimpress Eduma

Name of the Vulnerable Software and Affected Versions: ThimPress Eduma versions n/a through 5.4.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. Recommendations: For versions n/a...

PT-2024-26641

Name of the Vulnerable Software and Affected Versions Code for Recovery 12 Step Meeting List versions from n/a through 3.14.33 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

PT-2024-26684 · Yith · Yith Custom Login

Name of the Vulnerable Software and Affected Versions: YITH Custom Login versions 1.7.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For YI...

PT-2024-4353 · Google · Google Updator +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 1.3.36.351 Description: The issue is related to an inappropriate implementation in Google Updator, which allows a local attacker to perform privilege escalation via a malicious file. The severity of this issue ...

PT-2024-58: Insecure password storage in Yealink Meeting Server (YMS)

The vulnerability was identified in Yealink Meeting Server YMS, versions V26.0.0.67. The discovered vulnerability allows an attacker to obtain static key data, allowing user passwords to be decrypted. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 06.06.2024...

PT-2024-26889 · WordPress · Music Store

Name of the Vulnerable Software and Affected Versions: Music Store - WordPress eCommerce versions prior to 1.1.14 Description: A SQL injection issue allows a remote authenticated attacker with administrative privileges to execute arbitrary SQL commands, potentially obtaining or altering informati...

PT-2024-4425

Name of the Vulnerable Software and Affected Versions PyMongo versions 4.6.2 and earlier Description The issue is related to an out-of-bounds read in the 'bson' module, allowing deserialization of malformed BSON provided by a server. This can lead to an exception that may contain arbitrary...

PT-2024-21857 · Samsung · Exynos 1280 +4

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos 980 Samsung Mobile Processor Exynos 850 Samsung Mobile Processor Exynos 1280 Samsung Mobile Processor Exynos 1380 Samsung Mobile Processor Exynos 1330 Description: An issue was discovered in the function slsi n...

PT-2024-13425 · Unknown · Defender Security

Name of the Vulnerable Software and Affected Versions: Defender Security versions n/a through 4.2.0 Description: The issue is related to an Improper Authentication vulnerability, allowing access to functionality not properly constrained by ACLs. Recommendations: For Defender Security versions n/a...

PT-2024-26619 · Netgsm · Netgsm

Name of the Vulnerable Software and Affected Versions: Netgsm versions 2.9.19 and earlier Description: The issue is related to a Missing Authorization vulnerability in Netgsm. Recommendations: For versions 2.9.19 and earlier, update to a version that contains a fix for this issue. At the moment,...