450 matches found
CVE-2024-21136
Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications component: Security. Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
CVE-2024-21136
A vulnerability exists in the Security component of Oracle Retail Xstore Office (versions 19.0.5, 20.0.3, 20.0.4, 22.0.0, and 23.0.1). An unauthenticated attacker with network access via HTTP can exploit this to compromise the product, potentially leading to unauthorized access to critical data o...
PT-2024-4995 · Oracle · Oracle Retail Xstore Office
Name of the Vulnerable Software and Affected Versions: Oracle Retail Xstore Office versions 19.0.5, 20.0.3, 20.0.4, 22.0.0, and 23.0.1 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Office, potentially resulting in...
CVE-2024-21136: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications component: Security. Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
The vulnerability of the XStore plugin of the WordPress content management system allows a hacker to execute arbitrary SQL queries against the database.
The vulnerability of the XStore plugin of the WordPress content management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...
CVE-2024-33564
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33564
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33563
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33561
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33555
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...
CVE-2024-33555
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...
CVE-2024-33561
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33563
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33555 WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...
CVE-2024-33555 WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...
CVE-2024-33555
CVE-2024-33555 (WordPress XStore Core) is documented as a Missing Authorization vulnerability affecting XStore Core up to version 5.3.8. Public sources list affected products as the 8theme XStore Core plugin for WordPress, with remediation guidance indicating upgrading to a version later than 5.3...
CVE-2024-33561 WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33561 WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33561
CVE-2024-33561 - Summary (validated from connected docs) Affected product: 8theme XStore (WordPress/WooCommerce theme) versions up to 9.3.8 (n/a through 9.3.8 range cited) as described in the CVE entry and Red Hat advisory. Vulnerability type and root cause: Missing Authorization / unauthenticate...