PT-2024-34359 · Unknown +1 · Libsndfile +1

Name of the Vulnerable Software and Affected Versions: libsndfile versions 1.2.2 and earlier Description: The issue is related to a reachable assertion in the mpeg l3 encode.c file, specifically in the mpeg l3 encoder close function, which may lead to application exit. Recommendations: For...

Google Cloud Migrate 安全漏洞

Google Cloud Migrate is a cloud architecture center of Google, Inc USA. A security vulnerability exists in Google Cloud Migrate versions 1.1.0 through 1.2.2 that stems from the presence of insecure default user permissions...

WordPress ImagePress plugin <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via Plugin Settings vulnerability discovered by 家桥 王 in WordPress Plugin ImagePress versions = 1.2.2...

PT-2024-39836 · WordPress · Imagepress

Name of the Vulnerable Software and Affected Versions: ImagePress – Image Gallery plugin for WordPress versions up to, and including, 1.2.2 Description: The issue is due to missing or incorrect nonce validation on the imagepress admin page function, making it possible for unauthenticated attacker...

PT-2024-7334 · Google · Google Cloud Migrate To Containers

Name of the Vulnerable Software and Affected Versions: Google Cloud Migrate to Containers versions 1.1.0 through 1.2.2 Description: The issue is related to an insecure default user permission in Google Cloud Migrate to containers. A local user m2cuser is created with administrator privileges,...

PT-2024-38454 · Unknown +1 · Contact Form 7 +1

Name of the Vulnerable Software and Affected Versions: Contact Form to Any API plugin for WordPress versions 1.2.2 and earlier Description: The issue is related to Stored Cross-Site Scripting via Contact Form 7 form fields due to insufficient input sanitization and output escaping. This allows...

PT-2024-38512 · WordPress · Dn Popup

Name of the Vulnerable Software and Affected Versions: DN Popup WordPress plugin versions 1.2.2 and earlier Description: The issue is related to the lack of a CSRF check when updating the plugin's settings. This could allow attackers to make a logged-in admin change the settings via a CSRF attack...

WordPress plugin Preloader for Website security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-26661 · Freesia · Theme Freesia Event

Name of the Vulnerable Software and Affected Versions: Theme Freesia Event versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

CVE-2024-5127

CVE-2024-5127 affects lunary-ai/lunary versions 1.2.2–1.2.25 and describes an improper access-control vulnerability in the Team feature. The backend does not validate whether a user has paid for a plan before allowing invites with roles, enabling Free-plan users to invite members and assign roles...

WordPress Event theme <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Event versions = 1.2.2...

PT-2024-27674 · Lunary · Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary versions 1.2.2 through 1.2.7 Description: The issue is related to the DELETE endpoint located at packages/backend/src/api/v1/datasets, which is vulnerable to unauthorized dataset deletion due to missing authorization and...

PT-2024-21197 · WordPress · Wp Happy Coders Comments Like Dislike

Name of the Vulnerable Software and Affected Versions: WP Happy Coders Comments Like Dislike versions 1.2.2 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability, which allows functionality bypass. Recommendations: For versions 1.2.2 and earlier, upda...

PT-2024-24398 · Unknown · Nose Graze Novelist

Name of the Vulnerable Software and Affected Versions: Nose Graze Novelist versions through 1.2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that t...

PT-2024-20567 · Woocommerce · Woocommerce Box Office

Name of the Vulnerable Software and Affected Versions: WooCommerce Box Office versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in WooCommerce Box Office. Recommendations: For versions 1.2.2 and earlier, update to a version that contains a fix f...

PT-2024-21207 · Pexels · Pexels

Name of the Vulnerable Software and Affected Versions: Pexels: Free Stock Photos versions 1.2.2 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means that an attacker could potentially force the server to make unintended requests, potentially leading t...

PYSEC-2024-11

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.Users are recommended to upgrade to version 1.3.0, which fixes the issue...

WordPress Plugin ThemeIsle Cloud Templates & Patterns collection Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress Plugin ThemeIsle...

PT-2023-20401 · Zoho · Bigin

Name of the Vulnerable Software and Affected Versions: CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin versions 1.2.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the specified plugin. This type of issue allows an attacker to trick a user into...

PT-2023-10255 · Dimtion · Shaarlier

Name of the Vulnerable Software and Affected Versions: dimtion Shaarlier versions up to 1.2.2 Description: A critical issue has been found, affecting the function createTag of the file app/src/main/java/com/dimtion/shaarlier/TagsSource.java in the component Tag Handler. This issue leads to sql...